Privacy Policy

Introduction

This website is operated by Laura Duffy Therapy Psychotherapeutic Counsellor and supervisor ("I", "me"). I am committed to protecting your privacy and handling your personal data in accordance with UK GDPR and the Data Protection Act 2018.

Contact: therapy@lauraduffy.co.uk

ICO Registration Number: ZA276079

Data Collection

What Information I Collect: -

Contact form: name, email address, and the content of your message
Bookings: name, email, phone number, and payment details (processed securely by Wix Payments)
Clinical work: if you become a client, I keep session notes and relevant clinical information as part of your therapy record, in line with UKATA/NCPS professional and ethical requirements.

Legal Basis for Processing

- To respond to enquiries and arrange sessions — legitimate interest / contract

- To provide psychotherapy and supervision services, including keeping clinical records —consent and legitimate interest (health data is "special category" data under Article 9 UK GDPR, processed with your explicit consent, given at the start of therapy)

- To take payment for services — contract

Your contact and booking details are used only to communicate with you and manage sessions. Clinical notes are kept confidentially and are not shared with third parties except:

- Where required by law

- Where I am legally or ethically obliged to act on a safeguarding concern (risk of serious harm to you or others)

- With my clinical supervisor, in anonymised form, as part of standard professional practice

Data Storage & Retention

- Website form and booking data is stored via secure systems

- Clinical records are retained in line with UKATA/NCPS guidance (typically a minimum of 7 years after the end of therapy, or longer where required)

- Data is stored securely and access is limited to me

Third-Party Services

This site uses Wix as its website and booking platform, which may set cookies and process data on my behalf as a data processor. See Wix's privacy policy (https://www.wix.com/about/privacy) for details of their processing. I use write-up, for clinical note-taking.

Your Rights

Right of access: You can request details of the personal information I hold about you.
Right to rectification: You can ask me to correct inaccurate or incomplete data.
Right to erasure: You can ask me to delete your data (subject to my professional insurance requirements).
Right to complain: You have the right to complain to the Information Commissioner's Office (ICO) at ico.org.uk if you believe your data has been mishandled.
To exercise any of these rights, contact me at therapy@lauraduffy.co.uk

This website uses cookies via Wix for essential site functionality and analytics to understand how visitors interact with the site. You can choose to accept or decline cookies through your browser settings or the site cookie banner.

Changes & Contact

I may update this policy to reflect changes in legal requirements or my professional practice. If you have questions about how your data is handled, please contact me at therapy@lauraduffy.co.uk.