This Privacy Notice explains how I collect, use, store, and protect your personal information when you work with me as a therapy client. I am committed to handling your data lawfully, respectfully, and transparently.
I collect and process the following information: your name and contact details; information you share in enquiries; information you share during therapy sessions; administrative information such as invoices and scheduling; any correspondence between us; and emergency-contact details if provided. I do not record sessions, and I do not share your information with third parties unless legally required.
I collect and process your personal data to provide therapy services; communicate with you; maintain accurate clinical records; meet legal, professional, and ethical obligations; and manage appointments, billing, and administration. The lawful bases for processing are Contract, Legitimate Interests, and Legal Obligation (for record-keeping and safeguarding requirements).
Your data is stored securely using encrypted systems. I take appropriate technical and organisational measures to protect your information. Clinical notes are stored separately from identifying information.
I retain therapy records for seven years after your final session, in line with professional guidance. Administrative records may be kept for accounting and tax purposes as required by law.
You have the right to access your personal data; request corrections; request deletion where legally permissible; restrict or object to processing; and receive a copy of your data in a portable format. You can exercise these rights by contacting me at any time.
If you have any concerns about how I handle your personal data, you can raise a complaint by emailing me at info@natalieduncanpsychotherapy.co.uk.
I will acknowledge your complaint within 30 days, investigate the issue, and respond as soon as possible with an outcome. Under UK data-protection law, you should raise any concerns with me first.
If you are not satisfied with my response, you can contact the Information Commissioner’s Office (ICO) at www.ico.org.uk.