Privacy Notice

Privacy Notice: Cat Healy – Warwickshire Counselling and Psychotherapy Services. Date reviewed: 18/06/26

1. 

Cat Healy/WCPS is a private counselling practice operated by Catherine Healy, who is registered with the Information Commissioner’s Office. I act as the “Data Controller” for your personal information.

2. What Information I Collect

To provide effective counselling, I collect the following data:

  • Personal Data: I may collect: Name, date of birth, address, email address, and phone number.
  • Special Category (Sensitive) Data: Information about your health, mental well-being. I may request relevant medical/GP details. Notes taken during our sessions are special category information.

3. Lawful Basis for Processing

Under the UK General Data Protection Regulation (UK GDPR), I rely on the following lawful bases:

  • Performance of a Contract: Processing is necessary to fulfill our therapeutic agreement and manage appointments.
  • Special Category Data: Because mental health records (such as counselling notes) are sensitive, processing is necessary for the provision of health treatment, including counselling.

4. How Your Data is Stored

All personal details and session notes are kept strictly confidential. 

  • Digital Data: Stored on password-protected and encrypted devices/drive storage.
  • Paper Data: Kept in a secure, locked filing cabinet. 

5. Sharing Your Data

What you discuss in sessions stays between you and me, with very limited legal exceptions. I will not share your information unless:

You are at risk of serious harm to yourself or others.

There are safeguarding concerns regarding children or vulnerable adults.

I am required to do so by a court of law or under specific legislation (e.g., terrorism, money laundering).

6. Data Retention

I retain your personal information for as long as necessary to provide my services and meet legal or insurance obligations. In line with my professional insurance requirements, records are generally kept for seven years after our therapy ends, after which they are confidentially destroyed. 

If I am working with a child or young person, any notes made are kept for an additional 7 years after they turn 18.

Notes are never stored for longer than is necessary.

7. Your Rights

Under the Data Protection Act 2018 / UK GDPR, you have the following rights regarding your data:

  • Right to be informed: Transparent communication (this document).
  • Right of access: To request copies of your personal data (Subject Access Request). You can do this by emailing enquiries@wcps.co.uk
  • Right to rectification: To have inaccurate data corrected.
  • Right to erasure: To request the deletion of your personal data.
  • Right to complain: If you believe that your data has been mishandled: Step 1 – Email enquiries@wcps.co.uk with your complaint. I will acknowledge your complaint within 30 days, and aim to find resolutions within 3 months. If you are unhappy with the resolution of your complaint, you can escalate to the ICO (ico.org.uk).egistration reference ZB293175.