Privacy Notice & Data Protection Policy

Deborah Thorley Counsellor MBACP & NCPS

This Privacy Notice explains how I collect, use, store and protect your personal information in accordance with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018 and the Data (Use and Access) Act 2025.

Protecting your privacy is an important part of my professional practice. I only collect information that is necessary to provide counselling safely, ethically and in line with my legal and professional responsibilities.

1. Data Controller

Name: Deborah Thorley
Business: Debbie Thorley Therapies MBACP & NCPS
Address: Stirling Place, 22-24 High Street, Cleator Moor, Cumbria CA25 5LB
Email: hello@dttherapies.co.uk
Telephone: 07359 609452

2. What Information I Collect

The information I hold may include:

  • Your name, address, telephone number and email address.

  • Your GP details and emergency contact, where appropriate.

  • Information you choose to share about your physical or mental health.

  • Appointment dates and payment records.

  • Brief therapy notes where necessary to support safe and effective practice. I do not routinely keep detailed session-by-session notes.

  • Information relating to safeguarding concerns or legal obligations where applicable.


3. Why I Collect Your Information

I collect and use your information in order to:

  • Provide counselling safely and effectively.

  • Meet my professional obligations as a registered counsellor.

  • Maintain appropriate clinical records.

  • Receive professional supervision, where client information is anonymised wherever possible.

  • Comply with legal, safeguarding and insurance requirements.

  • Meet tax and accounting obligations.


4. Lawful Basis for Processing

Under UK GDPR, I process your personal information using the following lawful bases:

  • Performance of a contract, so I can provide the counselling service you have requested.

  • Legitimate interests, to maintain appropriate clinical records and ensure safe professional practice.

  • Legal obligation, where I am required to comply with safeguarding, legal or regulatory duties.

  • Special category health information is processed because it is necessary for the provision of health-related counselling services and for professional practice.


5. How Your Information is Stored

I take appropriate steps to keep your information secure.

  • Electronic records are stored on password protected and encrypted devices.

  • Paper records, where used, are kept in locked storage.

  • Emails and messages are retained only for as long as necessary.

  • Online counselling is carried out using secure platforms such as Microsoft Teams or

  • Zoom.

  • I do not sell or share your information for marketing purposes.


6. How Long I Keep Information

Records are retained for seven years after counselling has ended, in line with current professional guidance and insurance requirements.

Financial records are retained for six years to meet HMRC requirements.

Once the retention period has ended, records are securely destroyed.

7. Confidentiality and Sharing Information

Everything discussed in counselling is treated confidentially.

Information will only be shared if:

  • You ask me to do so and provide your consent.

  • There is a serious concern about your safety or the safety of someone else.

  • I am required to do so by law.

  • Information is discussed in professional supervision. Wherever possible this is

  • anonymised.


Where appropriate, I will always aim to discuss this with you first.

8. Your Rights

Under UK GDPR you have the right to:

  • Request access to the personal information I hold about you.

  • Ask for inaccurate information to be corrected.

  • Request that information is erased where there is no legal reason for me to retain it.

  • Request restriction of processing.

  • Object to certain types of processing.

  • Request a copy of your information in an appropriate format where applicable.


Requests should be made in writing to:

hello@dttherapies.co.uk

I will normally respond within one month.

9. Concerns and Complaints About Your Data

If you have any concerns about how your personal information has been handled, I encourage you to contact me in the first instance.

Email: hello@dttherapies.co.uk

Post: Stirling Place, 22-24 High Street, Cleator Moor, Cumbria CA25 5LB

In accordance with the Data (Use and Access) Act 2025, I will acknowledge your complaint within 30 days and aim to provide a full response within three months.

If you remain unhappy with the outcome, you have the right to complain to the Information Commissioner's Office (ICO).

Website: www.ico.org.uk

Telephone: 0303 123 1113

10. Professional Standards

I work in accordance with the ethical standards of both the British Association for Counselling and Psychotherapy (BACP) and the National Counselling and Psychotherapy Society (NCPS).

11. Policy Review

This Privacy Notice is reviewed annually, or sooner if legislation or professional guidance changes.

Last reviewed: June 2026

Stirling Place
22-24 High Street
Cleator Moor
Cumbria, CA25 5LB

Privacy Notice