PrIvacy Policy 

1. Introduction 

This Privacy Policy explains how Waves Therapy (“I”, “me”, or “my”) collects, uses, stores, and protects your personal information when you visit my website or engage with my counselling, supervision or trainingservices. 

I am committed to handling personal and sensitive information in a respectful, confidential, and lawful manner that complies with General Data Protection Regulation (GDPR). 

 

2. Information I Collect 

I may collect the following types of information: 

a) Personal Information 

  • Name 

  • Email address 

  • Phone number 

  • Any information you choose to provide through contact or enquiry forms 

  • Emergency contact details (if engaging with counselling or supervision sessions) 

  • GP details (if engaging with counselling sessions) 

b) Sensitive Information 

If you engage with my counselling services, I may collect sensitive personal information related to your mental health, wellbeing, and personal circumstances. This information is collected only when necessary and with your consent. 

I keep notes on sessions to help prompt my memory. These are kept securely electronically, are always password protected and do not include full client names or identifiable details. These notes are accessed only by me. Notes are kept for up to 3 years and then securely destroyed. 

c) Website Usage Information 

I may collect limited technical data such as: 

  • IP address 

  • Browser type 

  • Pages visited 

  • Time spent on the website 

This information is used only for website performance and security purposes. 

 

3. How I Use Your Information 

I use your information to: 

  • Respond to enquiries 

  • Provide applicable counselling, supervision or training services 

  • Manage appointments and communication 

  • Maintain accurate client records 

  • Improve my website and services 

  • Meet legal, ethical, and professional obligations 

I do not sell or trade your personal information. 

 

4. Legal Basis for Processing 

I collect and process personal information only when: 

  • You have given consent 

  • It is necessary to provide ethical services 

  • It is required by law or professional standards 

 

5. Confidentiality and Disclosure 

All counselling information is treated as confidential. 

I will only disclose personal or sensitive information: 

  • With your explicit consent 

  • Where required by law (for example, a court order) 

  • To comply with professional ethical obligations such as the need to break confidentiality due to risk to self or others. This is set out in further detail in my Counselling Contract and Supervision Contract. 

 

6. Data Storage and Security 

I take reasonable steps to protect your information from misuse, loss, unauthorized access, or disclosure. This includes: 

  • Secure digital storage systems 

  • Password protection 

  • Limiting access to authorised personnel only 

Information is retained only for as long as required by law and professional guidelines. All personal information is kept securely for 3 years and then destroyed. 

 

7. Third-Party Services 

My website may use third-party services (such as email providers, booking systems, or analytics tools). These providers may process limited data on my behalf and are required to comply with applicable privacy laws. 

I am not responsible for the privacy practices of external websites linked from my site. 

 

8. Cookies 

My website may use cookies to enhance user experience and analyse website traffic. You can disable cookies through your browser settings if you prefer. 

 

9. Payments 

Any credit/debit card payments and other payments you make will be processed by my third party payment providers.  

The payment data you submit will be securely stored and encrypted by my payment service providers under applicable law, for the purpose of processing any future payments.  

You may choose to opt out of this holding of information at any time.  

Please note that I do not directly process or store the debit/credit card data that you submit. 

 

10. Your Rights 

You have the right to: 

  • Access your personal information 

  • Request corrections 

  • Withdraw consent (where applicable) 

  • Request deletion of your data, subject to legal requirements 

To make a request, please contact me using the details below. 

 

11. Changes to This Policy 

I may update this Privacy Policy from time to time. Any changes will be published on this page. 

 

12. Contact Me 

If you have any questions or concerns about this Privacy Policy or how your information is handled, please contact: cate@waves-therapy.com