top of page
Privacy Notice

​​

Introduction

MH Counselling Service provides confidential counselling support to individuals. As a sole practitioner, I, Mand Harris, am the data controller for the personal information I hold about you. I handle your data in accordance with the UK General Data Protection Regulation (UK GDPR) and the ethical principles of professional bodies such as the British Association for Counselling and Psychotherapy (BACP) and/or UK Council for Psychotherapy (UKCP).

​

If you have any questions about how your information is used, you can contact me at: mandscounselling@gmail.com

​

What Information I Collect

To provide safe and effective counselling, I may collect and process:

  • Personal details — your name, contact information, and date of birth

  • Health and wellbeing information — relevant background needed for therapeutic work

  • Counselling notes — brief clinical records of our sessions

  • Appointment information — scheduling and attendance details

  • Safeguarding information — only where necessary for safety

I only collect information that is relevant and necessary for your care.

​​

Why I Use Your Information

Your personal data is used to:

  • Provide counselling and therapeutic support

  • Maintain clinical records in line with professional standards

  • Manage appointments and communication

  • Ensure safety and meet legal or ethical obligations

  • Monitor service quality

 

Lawful Basis for Processing

I process your data under UK GDPR using the following lawful bases:

  • Contract — to provide the counselling service you have agreed to

  • Legal obligation — safeguarding or legal requirements

  • Legitimate interests — safe and effective practice management

  • Article 9 (Special Category Data) — for the provision of health and counselling services

Where I rely on consent (e.g., for certain communications), you may withdraw it at any time.

​

Confidentiality and Its Limits

Confidentiality is central to counselling. Your information is kept confidential in line with professional ethical frameworks. There are specific situations where confidentiality may need to be broken:

  • Risk of serious harm to yourself or others

  • Safeguarding concerns involving children or vulnerable adults

  • Legal requirements such as a court order

Where possible, I will discuss this with you before any disclosure.

​​

Supervision

As required by BACP ethical practice, I discuss aspects of my work in clinical supervision to ensure safe and effective practice.

  • No identifying details are shared

  • Supervisors are bound by strict confidentiality

 

How I Store Your Data

I have sole access to your personal data. It is stored securely using:

  • Password‑protected systems

  • Encrypted digital storage

  • Secure cloud services (where used)

  • Secure storage for any paper records

 

How Long I Keep Your Data

In line with professional guidance, counselling records are kept for 5 years after your final session. After this period, they are securely deleted or destroyed.

​

Sharing Your Information

Your information is only shared when necessary and on a minimal basis:

  • Safeguarding concerns

  • Legal requirements

  • Trusted service providers (e.g., secure IT systems) operating under strict data protection agreements

Your information is never shared for marketing.

 

Your Rights

Under data protection law, you have the right to:

  • Access your data

  • Request corrections

  • Request deletion (where applicable)

  • Restrict or object to processing

  • Withdraw consent (where applicable)

  • Request a copy of your data

  • Raise a concern with the ICO

 

Data Security

I take appropriate measures to protect your data from:

  • Loss

  • Unauthorised access

  • Misuse

  • Accidental disclosure

 

Updates to This Notice

This Privacy Notice may be updated periodically to reflect changes in legal, ethical, or service requirements. The most current version will always be available on this page.

bottom of page