Your Privacy & Data Rights
Ailie Brown Therapy is committed to protecting your personal information. This policy explains how I manage data in line with UK GDPR principles.
Data Handling Practice
Personal Details
I collect essential contact details, including your name and email, and GP address, solely to facilitate your therapeutic journey and manage scheduling according to GDPR data minimisation.
Sensitive Data
Under the lawful basis of health care provision, I process sensitive information such as clinical assessments and session notes to ensure your therapeutic support remains safe and effective.
Security
Any information shared through forms, calls, or texts is stored using industry-standard security measures, though no digital transmission can be considered completely risk-free.
Lawful Basis for Use
My practice operates under the lawful basis of contract and legitimate interest to provide professional counselling. I collect only what is necessary to support your wellbeing. Your information is used for clinical record-keeping, session administration, and professional oversight. Data is retained only for the period required by my professional indemnity insurance and ethical frameworks. I aim to ensure all records are managed with integrity, transparency, and a focus on your confidentiality.
Data Safeguards
Secure Storage
Your records are held on secure, password-protected systems. I implement administrative and technical measures designed to keep your information private.
Encryption
Digital communications utilize standard encryption methods to help secure sensitive clinical data against unauthorized access while it is being transmitted.
Confidentiality
Clinical notes are coded to protect your identity and are accessible only to your therapist, except where legal or ethical duties require disclosure.
Data Control and Loss
While I maintain procedures to detect and respond to potential data breaches, please be aware that absolute security of online data can never be guaranteed.
Your Rights & Redress
Under UK law, you have the right to access, rectify, or request the erasure of your data, subject to professional retention obligations. If you have concerns about how your data is handled, you have the right to lodge a complaint with the Information Commissioner’s Office (ICO). I am dedicated to being transparent about your information and am available to discuss any privacy questions you have. My ICO registration number is ZC257535, and I am the data controller, so please contact me if you have any concerns about your data.