Carm's Counselling & Hypnotherapy Privacy Policy
Last Updated: 19 June 2026
At Carms Counselling & Therapy, your privacy is extremely important to me. I understand that sharing personal information takes trust, and I am committed to treating your information with the highest level of confidentiality, professionalism and respect.
This Privacy Policy explains how I collect, use, store and protect your personal information in accordance with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018 and the Data (Use and Access) Act 2025.
As a registered member of the British Association for Counselling and Psychotherapy (BACP), I work in accordance with the BACP Ethical Framework, which includes maintaining strict confidentiality while meeting my legal and professional responsibilities.
⸻
Information I Collect
To provide safe and effective counselling and therapy services, I may collect:
• Your full name
• Date of birth
• Home address
• Telephone number
• Email address
• GP details
• Emergency contact details (where appropriate)
• Information you choose to share during counselling sessions
• Brief anonymised clinical notes
• Appointment history
• Payment records where applicable
I only collect information that is necessary for the services I provide.
⸻
Why I Collect Your Information
Your personal information enables me to:
• Provide counselling and therapeutic services.
• Arrange and manage appointments.
• Maintain accurate client records.
• Meet my professional, ethical and insurance obligations.
• Comply with legal requirements.
• Protect your safety or the safety of others where there is a serious risk of harm.
⸻
Legal Basis for Processing Your Information
Under UK GDPR, I process your personal information because:
• It is necessary to provide the counselling services you have requested.
• It is necessary for my legitimate interests in operating a safe and professional counselling practice.
• Health-related information is processed as Special Category Data for the provision of health and therapeutic care.
⸻
Confidentiality and Sharing Information
Confidentiality is one of the foundations of counselling.
Your information will never be sold or shared for marketing purposes.
Information will only be shared where necessary:
• With your knowledge or consent.
• If there is a serious concern about your safety or the safety of another person.
• Where safeguarding responsibilities require disclosure.
• Where disclosure is required by law, including a court order.
• During professional clinical supervision.
Clinical supervision forms part of safe counselling practice. Any discussion with my supervisor is fully anonymised and your identity is never disclosed.
⸻
How Your Information Is Stored
Your information is stored securely using appropriate physical and electronic safeguards.
Paper records are kept in a locked filing cabinet.
Electronic records are stored on password-protected devices and secure email systems.
Reasonable technical and organisational measures are in place to help prevent unauthorised access, loss, misuse or disclosure of your personal information.
⸻
How Long Your Information Is Kept
In line with current professional recommendations and insurance requirements:
• Counselling records, brief clinical notes and your unique client reference number are normally retained for three years after therapy has ended unless a longer retention period is required by law.
• Telephone numbers and email addresses are generally deleted approximately one month after our work together has ended.
• Paper records are securely shredded once they are no longer required.
• Electronic records are permanently deleted when their retention period expires.
⸻
Your Rights
Under UK data protection legislation, you have the right to:
• Request access to the personal information I hold about you.
• Request correction of inaccurate or incomplete information.
• Request erasure of your personal information where appropriate.
• Request restriction of processing in certain circumstances.
• Object to certain types of processing.
• Request a portable copy of your personal information where applicable.
• Withdraw consent where processing relies upon consent.
Some rights may be limited where legal, ethical or safeguarding responsibilities apply.
⸻
Making a Data Protection Complaint
If you have any concerns about how your personal information has been handled, please contact me in the first instance.
Complaints can be made by email, telephone or in writing.
I will acknowledge your complaint within 30 days and investigate it promptly. I aim to provide a full response without undue delay and will work with you to resolve any concerns wherever possible.
If you remain dissatisfied following my response, you have the right to make a complaint to the Information Commissioner’s Office (ICO), the UK’s independent authority for data protection.
⸻
Website Cookies
This website uses only essential cookies that are necessary for the secure operation of the website, including administrator login and website security.
If you choose to follow links to external websites, please be aware that those websites operate under their own Privacy Policies and Cookie Policies. I cannot accept responsibility for the privacy practices or content of external websites.
⸻
Changes to This Privacy Policy
This Privacy Policy may be updated periodically to reflect changes in legislation, professional guidance or the services offered by Carms Counselling & Therapy.
The most up-to-date version will always be available on this website.
⸻
Contact Details
If you have any questions regarding this Privacy Policy or the way your personal information is handled, please contact:
Carms Counselling & Therapy
Carmela Mastroianni MBACP APA Accredited
Email: carmscounselling@hotmail.co.uk
Telephone: 07722456138
Website: www.carmscounselling.co.uk
