GDPR Privacy Policy & Data Protection Complaints Procedure
Last Updated: June 2026
Disclaimer
This website provides general information for educational purposes only and does not constitute counselling, psychotherapy, supervision, medical advice, diagnosis, or treatment. Use of this website does not establish a therapeutic, supervisory, or professional relationship.
GDPR Privacy Policy
I am committed to protecting your privacy and handling your personal information responsibly and in accordance with UK data protection legislation, including the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
I am a member of the National Counselling and Psychotherapy Society (NCPS) and work within the NCPS Code of Ethical Practice. This privacy policy explains how personal information is collected, used, stored, protected, and managed in the course of providing counselling, psychotherapy, and supervision services.
Who I Am
Name: Laura J. Lee
NCPS Membership Number: NCS13-00233
Email: ljltherapy@outlook.com
ICO Registration Number: 00014462785
Information I Collect
I collect information necessary to provide safe and effective counselling, psychotherapy, and supervision services.
Information provided directly by you
This may include:
Name and contact details
Information provided during initial enquiries
Assessment and intake information
Personal, therapeutic, and health-related information
Emergency contact details
GP details (where relevant)
Payment and invoicing information
Information collected automatically
When you visit this website, limited technical information may be collected, such as:
IP address
Browser type
Device information
Pages visited
Website usage statistics
This information is used to improve website performance, functionality, and user experience.
How I Use Your Information
Your personal information may be used for the following purposes:
Providing Counselling, Psychotherapy and Supervision
To deliver professional services safely, ethically, and effectively.
Managing Appointments and Communication
Including scheduling sessions, responding to enquiries, maintaining records, and communicating with clients.
Professional Supervision
In accordance with the NCPS Ethical Framework, client work may be discussed anonymously within professional supervision to support safe and effective practice.
Legal, Ethical and Professional Obligations
Including safeguarding responsibilities, insurance requirements, accounting obligations, and compliance with professional and regulatory standards.
Risk Management
Where there is a serious concern regarding the safety of yourself or another person, information may be shared in accordance with legal, ethical, and safeguarding responsibilities.
Website Improvement
To analyse website usage and improve functionality and user experience.
Lawful Basis for Processing
Under UK GDPR, personal information is processed under one or more of the following lawful bases:
Performance of a contract
Legitimate interests
Compliance with legal obligations
Provision of health or social care
Explicit consent where required
Special category data, including health-related information, is processed in accordance with Article 9 of UK GDPR where applicable.
Confidentiality and Information Sharing
Confidentiality is a fundamental part of my practice.
Your information will not normally be shared without your knowledge or consent unless:
There is a serious risk of harm to yourself or others
Disclosure is required by law or court order
Information is discussed anonymously within professional supervision
Information is shared with secure third-party service providers necessary for the operation of the practice
Such providers may include services used for:
Email communication
Video conferencing
Appointment booking
Payment processing
Website hosting
Accounting and administration
Reasonable steps are taken to ensure all third-party providers meet appropriate data protection standards.
Data Security
Appropriate technical and organisational measures are used to protect your personal information.
Electronic records are stored securely and access is restricted to authorised persons only. Password protection, encryption, and secure storage methods are used where appropriate.
Therapy notes are maintained as paper records and are stored securely in a locked filing cabinet when not in use. Access is restricted to me as the Data Controller, and records are retained and disposed of in accordance with UK GDPR, professional practice requirements, and insurance obligations.
While every effort is made to protect personal data, no electronic transmission or storage system can be guaranteed to be completely secure.
Data Retention
Unless there is a legal or professional reason to retain information for longer:
Client records and contact details are normally retained for 7 years following the end of therapy.
Initial enquiry information where therapy does not proceed is normally deleted within 6 months.
Data is securely destroyed when it is no longer required.
Your Rights
Under UK GDPR, you have the right to:
Access your personal information
Request correction of inaccurate information
Request restriction of processing in certain circumstances
Request erasure of personal information where legally appropriate
Object to certain types of processing
Request data portability where applicable
Lodge a complaint regarding the handling of your personal information
Requests will normally be responded to within one calendar month.
Data Protection Complaints Procedure
If you have concerns about how your personal information has been collected, stored, processed, used, or shared, you have the right to raise a formal data protection complaint directly with me.
How to Make a Complaint
Please submit your complaint in writing by email to:
Please include:
Your name and contact details
Details of your concern
Any relevant dates or information that may assist the investigation
What Happens Next
I will:
Acknowledge receipt of your complaint within 30 days
Investigate the matter fairly and appropriately
Keep you informed if further enquiries are required
Provide a written outcome without undue delay
If You Remain Dissatisfied
If you are unhappy with the outcome of my investigation, you have the right to escalate your concerns to the Information Commissioner's Office (ICO), the UK's independent authority for data protection and information rights.
Information Commissioner's Office (ICO)
Website: https://ico.org.uk
Clients outside the United Kingdom may also contact their local data protection authority where applicable.
Contact Information
For any questions regarding this Privacy Policy or how your personal information is handled, please contact:
Laura J. Lee
Email: ljltherapy@outlook.com
NCPS Membership Number: NCS13-00233
ICO Registration Number: 00014462785