Privacy Policy


Privacy policy: 

Vicki Craig and Susannah Hebden are registered as individual practitioners with the Information Commissioner’s Office. 

We collect and hold information about you as a legitimate interest as defined under the General Data Protection Regulations. This privacy policy explains how  we use any personal information  we collect about you when you use our services. It also informs you of your rights and our responsibilities in the processing of your personal information under the General Data Protection Regulations.

What information do we collect about you?

We collect contact information (address and phone number) and may collect information about your current and previous psychological and physical health, and your current and previous social and family circumstances during your appointments. We may also collect information about you when you voluntarily complete questionnaires.  We may also collect sensitive personal information defined as “Special Category Data” such as your sexual behaviour or orientation because we  are providing therapy.

How will we use the information about you?

We collect information about you to provide you with therapy services. This information is confidential. We discuss your personal information in supervision, with our supervisors, who are counsellors/psychotherapists for the purposes of ensuring that our practice is safe and effective, and as mandated by  professional bodies. We do not reveal your full name when  we share your information in supervision. Our supervisors do not share your personal information with anyone else.

Sharing your personal information with third parties.

We do not discuss your personal information with third parties. However, if  there was an immediate and serious risk that you might harm yourself or someone else then we may have to share your personal information with a third party such as your GP or the emergency services without first obtaining your consent. This might be because it is not practically possible to obtain your consent or because attempting to do so might lead to a delay in accessing help and therefore endanger your life or that of another.

In situations where we did have to share your personal information with third parties to protect you or another,  we will only share your personal information in so far as it is relevant and necessary to protect you or someone else. We will inform you what personal information is shared and to whom.

It is possible that your personal information may be requested by a Court of Law, Coroners Office or Professional Body in which circumstances you may have limited or no rights of refusal.

Access to your information and correction.

You have the right to request a copy of the information that we hold about you. If you would like a copy of some or all of your personal information, please email your individual therapist. We want to make sure that your personal information is accurate and up to date. You may ask  to correct or remove information you think is inaccurate. You have the right to ask  to erase the personal information w hold about you. We can refuse the request if your personal information is needed in the defence or exercise of legal claims, or there is an overriding legitimate interest to retain your information.

How to do I store your information.

We keep your personal information in electronic records using your initials as identifiers. This information is stored on computer devices using encryption and password protected systems. Your identifying personal information i.e. name and address are kept separately from your records. 

Length of storage of your personal information.

We keep your personal information and the record of our work together for six years. We  then erase your records.

Changes to the privacy policy.

We keep the privacy policy under regular review and this privacy policy was last updated on 1st October 2018.

Right to complain.

You have the right to complain to the Information Commissioners Office without prejudice about the processing of your personal data.