Last updated: June 2026
Your privacy is very important to me. This policy explains how I collect, store, and use your personal information when you contact me, attend therapy sessions, or otherwise interact with my counselling services. I am committed to protecting your data in line with the UK General Data Protection Regulation (GDPR), Data Protection Act 2018, the guidance of the Information Commissioner’s Office (ICO), and the British Association for Counselling and Psychotherapy’s (BACP) Ethical Framework.
Who I Am and Data Controller
I am Simone Simonetti, the sole data controller responsible for your personal data.
I am registered with the ICO (Registration Number available on request).
You can contact me about privacy matters at simonesimonetti.therapist@gmail.com
What Information I Collect
I collect personal information that you provide voluntarily when you:
- Contact me via forms, email, or phone
- Book or attend therapy sessions
- Share health, relationship, or sensitive personal information during therapy
This information may include your name, contact details, personal and sensitive data necessary to provide effective therapy, and transaction details related to session payments.
How I Use Your Information
Your data is processed only for the purposes of:
- Managing your enquiry and therapy bookings
- Providing therapeutic services tailored to your needs
- Maintaining accurate records for professional and legal obligations
- Communicating with you about your sessions or relevant updates
- Processing payments and financial records
I do not use your data for automated decision-making or profiling.
In line with professional requirements, I regularly engage in clinical supervision to support the quality of my therapeutic work. Any client information discussed in supervision is anonymised to protect your identity.
If therapy sessions are conducted online, I use platforms that are GDPR-compliant and offer end-to-end encryption. I also encourage you to ensure privacy at your location, for example by using secure internet connections and a private space.
Legal Basis for Processing
My lawful basis for processing your information is:
- Your explicit consent where required (especially for sensitive personal data)
- Performance of a contract between you and me (therapy agreement)
- Legitimate interests in maintaining therapy records and managing my practice
Data Sharing
Your personal data will not be shared with third parties except:
- Where required by law (e.g., safeguarding or legal processes)
- With your explicit consent
- Trusted service providers bound by confidentiality and data protection agreements, such as secure payment processors or IT support
I may also use secure digital tools or limited AI-assisted systems solely for administrative purposes, such as drafting communications or processing bookings. These systems do not access, store, or analyse therapy session content or confidential notes.
Data Security and Storage
I take your data security seriously:
- Electronic records are stored securely on encrypted devices or GDPR-compliant cloud systems
- Paper records, if any, are kept in locked cabinets accessible only to me
- Access is limited strictly to what is necessary to provide therapy
- Data retention aligns with professional guidelines and legal requirements and is destroyed securely when no longer needed
In the unlikely event of a data breach, I will act promptly to mitigate risks, notify affected individuals if required, and report the incident to the ICO within 72 hours, in line with GDPR obligations.
Your Rights
You have the right to:
- Access and receive a copy of your personal data
- Request correction of inaccurate or incomplete information
- Request deletion or restriction of your data in certain circumstances
- Object to certain data processing for legitimate reasons
- Withdraw consent at any time without affecting the lawfulness of prior processing
- Lodge a complaint with the ICO if you believe your data rights have been violated
To exercise these rights, please contact me at the details above.
Data Retention Period
I keep your therapy records for a minimum of seven years after our last contact or until you reach the age of 25 if you are under 18 at the time of therapy, in line with BACP and professional standards.
Cookies and Website Data
This privacy policy does not cover your use of third-party websites linked from mine or cookies set by these sites. For website-related data collection, please see the specific cookie policy if available.
Changes to This Policy
I may update this policy occasionally to reflect changes in legal or professional requirements. I will notify you of significant changes via email or website notice.
If you have any questions or concerns about your data or wish to discuss privacy matters, please do not hesitate to contact me.
