Privacy Policy: How I handle your information.
I am Claire Parkinson, a psychotherapist in private practice operating as Claire Parkinson Therapy. I am the data controller for the personal information you share with me.
Who I am
I collect and hold the following categories of personal information:
Concise session notes
Contact details
GP and next of kin contact details
What information I collect
Why I use your data
I use your personal information for the following purposes, each with a lawful basis under UK GDPR:
To provide therapy, keeping session notes and tailoring the work to your needs (contract)
To communicate with you — scheduling sessions, responding to enquiries (contract)
To meet legal and professional obligations — safeguarding, mandatory reporting, and compliance with UKCP standards (legal obligation)
To protect vital interests — using GP or next of kin details only where there is a serious and immediate safety concern (vital interests)
How long I keep your data
I retain personal data and session records for 7 years after the end of our therapeutic work together, in line with UKCP guidance and standard professional practice. After this period, all records are securely destroyed.
Who I share your data with
I do not sell or share your personal data with third parties for commercial purposes. Your information may be shared only in the following circumstances:
Clinical supervision — I discuss my work with a qualified clinical supervisor as required by good professional practice. Your identity is never disclosed; only anonymised material is used.
With your consent — if you ask me to liaise with another healthcare professional, I will only do so with your explicit agreement.
Legal requirements — if required by law, such as a court order, or where I have a safeguarding duty to act.
How I keep your data secure
I take the security of your personal data seriously. Measures I have in place include password-protected devices, encrypted storage for session notes, and secure email practices.
Online sessions take place via Google Meet. While I take reasonable precautions, please be aware that no internet-based communication is entirely without risk. I would encourage you to join sessions from a private space where you will not be overheard.
Your rights
Under UK GDPR you have the following rights regarding your personal data:
Request a copy of the personal data I hold
Ask me to correct any inaccurate information
Request deletion of data that is no longer necessary, subject to my professional retention obligations
Ask me to limit how I process your data in certain circumstances
Receive your data in a portable format
Object to certain types of processing where you have grounds to do so
To exercise any of these rights, please contact me at claireparkinsontherapy@gmail.com. I will respond within one month.
If you are unhappy with how I have handled your data, you have the right to complain to the Information Commissioner's Office (ICO) at ico.org.uk or by calling 0303 123 1113.
Updates to this policy
I may update this policy from time to time to reflect changes in my practice or in data protection law. The current version will always be available on this page. If any significant changes are made, I will let existing clients know directly.
This privacy policy applies to Claire Parkinson Therapy only. It was last reviewed in January 2025. If you have any questions, please contact claireparkinsontherapy@gmail.com.