This section explains in detail what I do with your personal information
Caroline Barrett Counselling· Last updated: October 2026
Introduction
Your privacy matters to me. I will keep your personal information safe and secure, and use it only for the purpose it was given. I follow the UK GDPR, the Data Protection Act 2018 (as amended) and the Privacy and Electronic Communications Regulations 2003.
This notice explains what I do with your information from first contact to after therapy ends. I am the "data controller", meaning I am responsible for your data.
-
Name: Caroline Barrett
-
ICO registration number: ZA742778
-
Address:
Therapy @ Gandy Street
25-26 Gandy Street
EX4 3LS
If you have any questions, contact me at: carolinebarrett@protonmail.com
Lawful basis for using your information
-
Enquiring about or having therapy: processing is necessary for our contract.
-
After therapy has ended: legitimate interests, such as answering future queries or complaints and meeting professional and legal obligations.
-
Health information ("special category" data): processing is necessary to provide health treatment (counselling) under a contract with a health professional, which is the contract between you and me.
How I use your information
Initial contact.
I collect your name, email and reason for enquiry to respond to you. This may come from you, from a referrer such as your GP, or from someone enquiring on your behalf; if someone else gives me your details, I will provide this notice within one month. You do not have to give me this information, but I may not be able to offer counselling without it. If you decide not to proceed, I will delete your data within one month, or sooner if you ask.
During counselling.
Everything you discuss is confidential, except if there is reason to believe you or someone else is at risk or there are legal obligations for me to do so. I will endeavor to speak to you first unless safeguarding issues prevent this. Your details and session notes are kept separately: details such as contact information in your contract are stored in a safe and session notes are pseudonymised and stored in a locked, fire proof folder or in a safe. These are not shared except as set out below. I delete emails after four years.
After counselling.
I keep your contract and details for 5 years after our contact ends, then destroy them securely. Ask me if you want them deleted sooner.
Sharing your information
I only share data with suppliers and advisers I have contracted, under terms that limit them to the specific task. Current recipients:
-
Supervision: details of my client work are discussed with experienced colleagues to ensure I am working ethically.
-
On my death or severe incapacitation my Clinical Trustee will gain access to your information to be able to inform you and support the unplanned ending of our work.
I do not use automated decision-making or profiling.
Your rights
You can ask me to give you a copy of your information, correct it, delete it, limit or stop how I use it, and you can object to its use in some circumstances. If I hold information about you, I will tell you what it is, where it came from, why I hold it, how long I will keep it and who it may be disclosed to. Make requests in writing to caroline.barrett@protonmail.com. More on your rights: ico.org.uk/your-data-matters.
If you have a complaint, please contact me first. You can also complain to the ICO, the UK data protection regulator: ico.org.uk/make-a-complaint.
Data security
I take the security of your data seriously. I use a zero-access encrypted email service, an end-to-end encrypted telehealth platform that does not require client login or download, password-protected devices, a safe for storage of contact information, pseudonomised note taking and locked fireproof storage.
Visitors to my website
I use Wix and Google Analytics to collect anonymous visitor information, such as page visit numbers, so I can improve my service. I do not try to identify visitors, and nor does Wix. My lawful basis is legitimate interests. I use cookies to help the site work, and non-essential cookies only with your consent. If you complete a form, the data is stored temporarily on the web host before being sent to me. Further information on Wix privacy policy can be found here: https://www.wix.com/about/privacy