Privacy Policy

WEBSITE VISITORS

WHAT I COLLECT

When you visit my website, Google Analytics collects anonymised information about how visitors use the site - such as which pages are viewed and how long people spend on them. This data does not identify you personally and I do not attempt to identify individual visitors.

My website uses strictly necessary cookies to function, and third-party cookies for Google Analytics and Squarespace. You can control cookies through your browser settings.

WHY I COLLECT IT

I use this information to understand how my website is being used so I can improve it. My lawful basis is legitimate interests.

HOW LONG I KEEP IT

Anonymised analytics data is retained in line with Google Analytics' standard retention settings. No personally identifiable information is stored.

ENQUIRIES

WHAT I COLLECT

When you fill in my interest form, I collect the information you provide - which may include your name, email address, location, what brings you to therapy, and your availability. This is submitted through my website and comes directly to me.

WHY I COLLECT IT

I use this information to respond to your enquiry and assess whether I might be a good fit for what you're looking for. My lawful basis is legitimate interests. For any sensitive personal information you share (such as mental health history), my lawful basis is that it is necessary for the provision of health treatment.

HOW LONG I KEEP IT

If we do not go on to work together, I will delete your information within six years. If you would like it deleted sooner, just let me know.

WHO I SHARE IT WITH

Your enquiry information is not shared with any third party. It comes directly to me and is stored only on my secure, password-protected devices.

NEWSLETTER

WHAT I COLLECT

If you sign up to my newsletter, I collect your email address. This is stored securely through Squarespace Email Campaigns.

WHY I COLLECT IT

I use your email address to send occasional emails with updates, practical tools, and relevant content. My lawful basis is your consent, which you can withdraw at any time.

HOW LONG I KEEP IT

I will keep your email address for as long as you remain subscribed. You can unsubscribe at any time using the link in any email. If you would like your data removed entirely, please contact me at jo@jolofthousetherapy.co.uk.

WHO I SHARE IT WITH

I do not share your details with any third parties. Your email address is held only within Squarespace Email Campaigns and is not used for any other purpose.

THERAPY CLIENTS

WHAT I COLLECT

Once we begin working together I will hold your contact details (name, email address, location), brief session notes, and any relevant correspondence between us.

brief session notes are stored securely on Zanda, a platform designed for health practitioners that complies with UK GDPR. Appointments are managed through Zanda and Calendly. All other information is stored on password-protected devices.

WHY I COLLECT IT

I collect this information to provide therapy to you and to keep accurate records as required by my professional obligations. My lawful basis is the performance of a contract. For sensitive personal information, my lawful basis is that it is necessary for the provision of health treatment.

CONFIDENTIALITY

Everything discussed in our sessions is confidential. Confidentiality may only be broken if I believe there is a serious risk of harm to you or another person, if there is a safeguarding concern about a child or vulnerable adult, or if there is a legal requirement to disclose. Where possible, I will speak to you before sharing any information.

I undertake regular clinical supervision and may discuss your case with my supervisor, but no identifying details will ever be shared.

HOW LONG I KEEP IT

Your records will be kept for seven years after our last contact, in line with professional guidance, and will then be securely destroyed.

WHO I SHARE IT WITH

Your information is not shared with third parties except as described under confidentiality above.

YOUR RIGHTS

What you can ask me to do

Under UK GDPR you have the right to:

• Access a copy of the personal information I hold about you

• Ask me to correct any inaccurate information

• Ask me to delete your personal information (subject to any legal obligations I have to retain it)

• Ask me to restrict or stop processing your information

• Withdraw consent where consent is the basis for processing

To exercise any of these rights, please contact me at jo@jolofthousetherapy.co.uk. You can read more about your rights at ico.org.uk/your-data-matters.

If you have a concern about how I handle your data that we are unable to resolve together, you have the right to complain to the Information Commissioner's Office at ico.org.uk.