Privacy Policy

1. Introduction

This policy explains how Forge & Faculty (the "Data Controller") collects, uses, and protects your personal information. I am committed to protecting your privacy and complying with the UK Data Protection Act 2018 and UK GDPR.

2. Information I Collect

To provide effective therapy, I collect the following:

  • Personal Details: Name, date of birth, address, and contact information.

  • Emergency Contact: Name and number of a trusted person or your GP.

  • Special Category Data: Notes regarding your mental health, medical history, and session content.

  • Digital Data: IP addresses and cookies (if you use my website).

3. Why I Collect This Data (Lawful Basis)

Under UK GDPR, I process your data under the following bases:

  • Contract: To fulfill the therapeutic agreement we have signed.

  • Health & Social Care: (Article 9) To provide confidential mental health counselling.

  • Legal Obligation: If I am required by law to disclose information (e.g., safeguarding).

4. How I Store Your Data

  • Digital Notes: Any digital records are kept on an encrypted, password-protected drive or a GDPR-compliant practice management software.

  • Paper Records: Any handwritten notes are kept in a locked filing cabinet.

  • Retention: In the UK, it is standard practice to keep therapy records for 7 years after the end of our work together, after which they are securely destroyed.

5. Who I Share Data With

Your data is never sold. It is only shared in these specific UK-regulated instances:

  • Clinical Supervision: I discuss cases with my supervisor (your identity is anonymised).

  • Safeguarding: If there is a risk of serious harm to yourself or others, I may contact your GP or emergency services.

  • Legal Requirement: In cases of terrorism, money laundering, or by court order.

6. Your Rights

As a UK resident, you have the following rights:

  • The Right to Access: You can request a copy of the data I hold about you (a "Subject Access Request").

  • The Right to Rectification: You can ask me to correct any inaccurate information.

  • The Right to Erasure: In some circumstances, you can ask me to delete your data (though I may be legally required to keep it for insurance/legal purposes).

7. Complaints

If you have concerns about how I handle your data, please contact me directly first. If you remain dissatisfied, you have the right to complain to the Information Commissioner’s Office (ICO) at www.ico.org.uk.

ICO Registration Number: To follow

If you have any complaints surrounding my service to you, you can contact the BACP by writing to:

BACP House, Unit 15, St. John’s Business Park, Lutterworth. LE17 4HB

Email: professional_conduct@bacp.co.uk

Contact me
Contact me
A workspace with two people, one using a laptop and the other writing in a notebook, with a large vase of two white calla lilies, glasses of water, and minimalistic decorations on the desk.