Last Updated: 18/6/2026
This privacy statement explains how I collect, use, store and protect personal information when you visit my website, contact me, book sessions with me, or otherwise interact with me. I am committed to handling personal information fairly, lawfully and transparently in accordance with the UK General Data Protection Regulation, the Data Protection Act 2018 and other applicable UK data protection laws.
For the purposes of UK data protection law, I am the data controller for the personal information described in this statement. This means I decide why and how your personal information is used.
My contact details are: tangerine.lotus99@gmail.com
I may collect and use the following types of personal information, depending on how you use my website and services: identity and contact information, such as your name, email address, telephone number and postal address; medical information, including date of birth, emergency contact, mental health history and GP details; communications information, such as messages you send to me by email; technical information, such as your IP address, browser type, device information, pages visited and how you use my website; any other information you choose to provide to me.
I usually collect personal information directly from you when you contact me, make a booking, or otherwise provide information to me. I may also collect technical information automatically when you use my website through cookies or similar technologies.
I only use personal information where I have a valid lawful basis under UK data protection law. The purposes for which I may use your information are primarily for contact, but also to meet legal requirements and ethical considerations defined by the British Association for Counselling and Psychotherapy (BACP). If we decide to work together, I will keep brief notes of our sessions, identified by your initials and the date of the session, and these are stored separately to your personal details. I use a paper diary to record my appointments, using only your initials. My computer is password-protected.
My website may use cookies and similar technologies to make the website work, improve performance, understand how visitors use the site, remember preferences, or support marketing activities. Some cookies are essential for the website to function. Where required by law, I will ask for your consent before using non-essential cookies or similar technologies. You can usually manage cookies through your browser settings and through the cookie settings on my website.
I may share personal information with trusted third parties where necessary for the purposes described in this statement. This may include website hosting providers, email and IT service providers, payment processors, analytics providers, marketing service providers, regulators, public authorities, or other parties where required by law. I will not sell your personal data to any third party.
I require third-party service providers to use personal information only as necessary to provide their services to me and to protect it appropriately.
I will only keep personal information for as long as reasonably necessary for the purposes for which it was collected, including to meet legal, accounting, reporting, tax or regulatory requirements. The length of time I keep information will depend on the type of information, the purpose for which it is used, and any legal or business need to retain it. These durations are defined by UK law and the BACP.
I take appropriate steps to protect personal information against unauthorised access, loss, misuse, alteration or disclosure. These steps may include access controls, secure passwords, encryption where appropriate, website security tools, secure storage, supplier due diligence and limiting access to those who need it.
Under UK data protection law, you have rights in relation to your personal information. These may include the right to:
· be informed about how your personal information is used;
· access the personal information I hold about you;
· ask me to correct inaccurate or incomplete information;
· ask me to delete your personal information in certain circumstances;
· ask me to restrict how I use your personal information in certain circumstances;
· object to my use of your personal information in certain circumstances;
· receive certain information in a portable format;
· withdraw consent at any time, where I rely on consent; and object to direct marketing at any time.
These rights are not absolute and may not apply in every situation. If you wish to exercise any of your rights, please contact me using the details in section 1. I may need to ask for information to confirm your identity before responding.
If you have concerns about how I use your personal information, please contact me first so I can try to resolve the issue. Please submit your complaint in writing using the details in section 1. I will acknowledge your complaint within 30 days of receipt. I will then investigate and provide a full response without undue further delay. You will be kept informed throughout this process. If you are dissatisfied with this response, you may escalate your complaint to the Information Commissioner’s Office (ICO). The ICO can be contacted via their website: ico.org.uk.
I may update this privacy statement from time to time to reflect changes in my website, services, legal requirements or how I use personal information. When I make changes, I will update the “Last updated” date at the top of this statement.