Client Privacy Notice
Effective Date: June 2026
Introduction
This Privacy Notice explains how your personal information is collected, used and stored when you engage in counselling or psychotherapy with me.
It forms part of my commitment to providing a professional, ethical and confidential service.
Data Controller
Maegan Whitton
Maegan Whitton Therapy
Email: hello@maeganwhittontherapy.co.uk
Telephone: 07730748267
ICO Registration Number: ZB963596
What information I collect
To provide therapy safely and effectively, I may collect and hold:
Name
Address
Date of birth
Telephone number
Email address
Emergency contact details
GP details (where appropriate)
Relevant medical information
Information shared during sessions
Appointment records
Brief clinical notes
Payment records
I only collect information that is necessary for providing therapeutic services.
Special Category Data
As a therapist, I process special category data relating to health and wellbeing.
This information receives additional legal protection under UK GDPR and is handled with the highest level of confidentiality.
How your information is used
Your information is used to:
Provide counselling and psychotherapy
Maintain professional records
Arrange appointments
Contact you regarding your sessions
Meet legal and ethical responsibilities
Protect your safety or the safety of others where necessary
Lawful Basis
The lawful bases relied upon include:
Performance of a contract
Legitimate interests
Legal obligations
Explicit consent where required
Health information is processed under Article 9 UK GDPR for the provision of health and therapeutic care.
Confidentiality
Everything discussed during therapy is treated confidentially.
There are limited circumstances where confidentiality may need to be broken, including:
Serious risk of harm to yourself
Serious risk of harm to another person
Safeguarding concerns involving children or vulnerable adults
Legal requirements such as a court order
Duties imposed under relevant legislation
Where appropriate and safe to do so, I will discuss this with you beforehand.
Clinical Supervision
As required by my professional body, I attend regular clinical supervision.
Your work may be discussed anonymously to ensure I provide safe and effective therapy. No identifying information is shared.
Record Keeping
I keep brief factual notes following sessions to support continuity of care and meet professional standards.
Records are stored securely using password-protected systems and/or locked storage.
Data Retention
Client records are typically retained for seven years after therapy ends, in line with professional guidance and insurance requirements.
After this period, records are securely destroyed.
Sharing Information
Your information will not be shared with third parties unless:
You have given your consent
It is necessary to protect someone from serious harm
Disclosure is required by law
Professional obligations require limited anonymous discussion in supervision
Communication
Email and text messages are used primarily for arranging appointments and administrative matters.
While reasonable precautions are taken, electronic communication cannot be guaranteed to be completely secure.
Payments
Payment information is retained for accounting and tax purposes in accordance with UK legal requirements.
Banking details are not stored beyond what is necessary for financial record-keeping.
Your Rights
You have the right to:
Access your personal information
Request correction of inaccurate information
Request restriction of processing
Request deletion where legally appropriate
Object to processing
Withdraw consent where consent is relied upon
Lodge a complaint with the Information Commissioner's Office
Questions
If you have any questions about how your personal information is handled, please contact me directly.
Open communication is an important part of the therapeutic relationship, and I will always endeavour to answer any concerns you may have.