Data Protection & Privacy Notice

Below is a detailed description of how I handle your personal information.

Your privacy is very important to me. You can be confident that your personal information will be kept safe, secure, and used only for the purpose for which it was
given.

In my counselling practice, I gather only the information necessary to contact you and provide counselling services.

I adhere to current data protection legislation, including the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, and the Privacy and Electronic Communications Regulations.

This privacy notice explains:

  • Why I can process your information and for what purpose
  • Whether you must provide it to me
  • What I store and how long I store it for
  • Whether there are other recipients of your personal information
  • Whether I use automated decision‐making or profiling
  • Your data protection rights

I am happy to discuss any questions you may have about this policy. You can contact me by email or telephone.

Data Controller
The term “Data Controller” describes the person who collects, stores, and is responsible for people’s data. In this instance, the Data Controller is me, Lucy Ananda, trading as The Gentle Rising.

I am registered with the Information Commissioner’s Office (ICO).

My registration number is ICO:00014761802

Postal address: 32 Walkers Way, Wootton, Northampton, NN4 6JB
Telephone: 07798630903
Email: hello@thegentlerising.co.uk

Why I can process your information and what purpose I am processing it for

If you are currently having therapy with me, or are in contact to consider therapy, I process the information necessary to contact you and provide counselling services.

The lawful basis for processing your personal information is Legitimate Interests.

Any special category data, including information relating to your health, is processed in accordance with UK GDPR requirements for the provision of counselling services.

Whether you have to provide it to me

You are not obliged to provide personal information, but I cannot contact you or provide counselling services without it.

What I store and how long I store it for

I store your name, address, email address, telephone number, and next of kin details securely.

Your contact details are used only for communication related to your sessions.

All client documents are stored in encrypted form, either within Google Drive (AES‑256 at rest) or on encrypted local drives using BitLocker/FileVault.

I keep brief, handwritten session notes after each session. These are stored securely in a locked cabinet accessible only to me.

Session notes are retained for seven years following the end of therapy, in line with professional guidance and insurance requirements, after which they are securely destroyed.

After we finish working together, I will delete your number from my phone and securely destroy any written contact details after one month.

You have the right to request access to your records at any time.

Whether there are other recipients of your personal information

There are no other recipients of your personal information.

Very occasionally, I may pass your telephone number to another professional if I refer you for additional support. You would be fully informed beforehand, and your consent would be obtained before any information is shared.

Automated decision‐making or profiling

I do not use automated decision‐making or profiling.

Your data protection rights

You have the right to:

  • Ask what information I hold about you
  • Request access to your records
  • Request correction of inaccurate information
  • Request restriction or deletion of certain data, where applicable

To request information, please put your request in writing. I will respond as promptly as possible and within the timeframes required by law.

Website data

When someone visits my website, I use a third‐party service (e.g., Google Analytics) to collect standard internet log information and details of visitor behaviour patterns.

This helps me understand how visitors use my site. The information is processed in a way that does not identify anyone.

My website uses cookies to help it function efficiently. No user‐specific data is collected by me or any third party through these cookies.

If you complete a form on my website, the information you provide may be temporarily stored by my website host before being securely transmitted to me.

Devices in the counselling room

If you bring devices such as mobile phones, smart watches, or tablets into sessions, please be aware that some may collect information through voice assistants or connected applications.

If you have privacy concerns, you may wish to switch these devices off during our session.

I do not have any of my own devices in the room unless their use has been agreed in advance.

Concerns or complaints

If you have any concerns about how I have handled your personal information, please contact me first so I can address the issue.

If you remain dissatisfied, you have the right to lodge a complaint with the Information Commissioner’s Office (ICO).

Information about making a complaint can be found at www.ico.org.uk.