LAVENDER PATH COUNSELLING PRIVACY POLICY

This privacy policy explains how I collect, use, store and protect your personal information when you use my counselling services.

Contact details

Telephone: 07365 047912
Email: charlotte@lavenderpath.co.uk

If you have any questions about this notice or how your data is handled, please contact me using the details above.

What information I collect, use, and why

To provide counselling and support services, I may collect and use the following personal information:

• Your name, address, and contact details
• Date of birth
• Emergency contact details
• Next of kin or support network information (where relevant)
• Relevant health information (including mental and physical health      history, medical conditions, medications, and allergies where applicable      to your care)
• Session notes and counselling records
• Payment information (if you pay privately)

I may also collect limited information where necessary for safeguarding purposes or to protect you or others from serious harm.

How I use your information

I use your information to:

• Provide safe and effective counselling services
• Assess your needs and plan appropriate support
• Maintain accurate clinical records
• Manage appointments and payments
• Respond to emergencies or safeguarding concerns
• Meet legal and professional obligations

Lawful basis for processing your data

Under UK data protection law (UK GDPR), I must have a lawful reason to use your personal data. I rely on the following:

• Consent – you have given clear permission for me to work with your information
• Contract – your information is needed to provide counselling services you have requested
• Legal obligation – I am required to keep certain records or share information where the law requires it
• Vital interests / safeguarding – where information must be used to protect you or someone else from serious harm
• Legitimate interests – for managing and improving safe professional practice

You have the right to withdraw consent at any time where consent is the basis for processing, although this may affect the ability to continue counselling in some circumstances.

Your data protection rights

You have rights under data protection law, including the right to:

• Access your personal information
• Request correction of inaccurate information
• Request deletion of your data (in certain circumstances)
• Request restriction of how your data is used
• Object to how your data is processed
• Request transfer of your data to another provider
• Withdraw consent where applicable

I will respond to any request within one month.

Where I get your information from

I may receive your information from:

• You directly
• Other health or care professionals (with your consent where appropriate)
• Employee Assistance Programmes (EAPs), if applicable

How long I keep your information

I keep counselling records for a minimum of 7 years after your last session, in line with professional guidance. In some safeguarding situations, records may be kept for longer if necessary.

Who I share information with

I keep your information confidential. However, I may share it with:

• Your GP or other healthcare professionals (with your consent where possible)
• Emergency services, if there is a serious risk of harm
• Professional supervisors or advisors (in anonymised form where possible)
• Legal or regulatory bodies if required by law

Confidentiality and safeguarding

Everything discussed in counselling is treated as confidential. However, confidentiality may be broken if:

• You give consent for information to be shared
• There is a legal requirement to do so
• There is a serious risk of harm to you or others
• There are safeguarding concerns involving a child or vulnerable adult

Where possible, I will aim to discuss this with you first unless doing so would increase risk.

How to complain

From 19 June 2026, if you have any concerns about how your personal information has been collected, used, stored, shared or deleted, you have the right to raise a data protection complaint directly with me by using the contact details at the top of this privacy notice. I will acknowledge your complaint within 30 days, review it without undue delay and let you know the outcome.

If you remain concerned about how I have used your data after raising a complaint, you can also contact the UK data protection regulator:

Information Commissioner’s Office (ICO)
Website: https://www.ico.org.uk/make-a-complaint
Helpline: 0303 123 1113