Privacy Policy

This privacy notice explains how Hannah Bashford Counselling collects, uses, stores and protects personal information. It should be checked against the actual systems and providers used in the practice before publication.

Information I may collect

Contact details and basic identifying information needed to arrange and provide counselling.
Assessment information relevant to understanding your needs and whether counselling is appropriate.
Session records and information you choose to share during counselling.
Administrative and payment information.
Information required to manage safeguarding, risk, complaints, legal obligations or professional accountability.

Counselling information may include sensitive or special-category personal data. I will only collect and use information that is relevant and necessary for the service and will apply appropriate legal protections.

How information is used

To arrange and provide counselling.
To communicate about appointments and practical matters.
To maintain appropriate professional records.
To support safe and ethical practice, including supervision and safeguarding.
To meet legal, regulatory, insurance or professional obligations where applicable.
To deal with complaints or incidents where necessary.

Who information may be shared with

Information is not routinely shared with third parties. Where sharing is necessary, it will be based on your agreement/consent where appropriate, or another lawful and ethically justified basis. Possible recipients may include a professional supervisor, relevant healthcare/emergency/safeguarding services, insurers or legal/regulatory bodies where applicable.

Confidentiality and its limits

Confidentiality is a central part of counselling. It is not absolute. The main foreseeable limitations in this practice are serious safeguarding/safety concerns, legal requirements or authorisation, and professional supervision. I will share the minimum necessary information and, where safe and appropriate, discuss disclosure with you.

Storage and security

I take reasonable and appropriate steps to protect your personal information from loss, misuse, unauthorised access, disclosure or alteration.

Client information is stored securely using password-protected devices and secure, access-controlled digital storage. Where paper records are used, these are kept securely and are not accessible to unauthorised people.

I only access client information when it is necessary for providing counselling services, managing my practice, meeting professional responsibilities or complying with legal requirements.

I do not routinely share client information with other people or organisations unless this is necessary and lawful, for example where there is a safeguarding or serious risk concern, where disclosure is required by law, or where you have given appropriate consent.

I will retain personal information only for as long as necessary and in accordance with my professional, legal and insurance requirements. When information is no longer required, it will be securely deleted or destroyed.

How long information is kept

Client records are normally retained for 5 years after the end of our counselling relationship

The retention period should reflect your professional, legal, insurance and business requirements. Records will then be securely deleted/destroyed.

Your rights

Depending on the circumstances, you may have rights concerning access to, correction of, restriction of or objection to processing of your personal information, and other rights under UK data-protection law. Some rights are subject to exceptions and may not apply in every situation.

Questions or concerns

Please contact me first if you have a question or concern about how your information is handled:

You can also seek information or raise a data-protection concern with the Information Commissioner's Office (ICO).