Privacy Policy

1. Who I am

This website is operated by Lucy Lee, an integrative psychotherapist in private practice (Your Story Psychotherapy)

I am registered with BACP and UKCP and adhere to their ethical framework and confidentiality requirements.

Contact details:
Email: yourstorypsychoherapy@hotmail.com
Phone 07347 252250

2. Purpose of this Privacy Policy

This Privacy Policy explains how I collect, use, store, and protect your personal data when you:

• Use this website
• Contact me via email or contact forms
• Engage in psychotherapy services

I am committed to protecting your privacy and handling your data in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

3. What information I collect

a) Personal data

• Name
• Email address
• Phone number
• Appointment details
• Emergency contact details (if provided)

b) Sensitive personal data (special category data)

As a psychotherapist, I may process highly sensitive information, including:

• Mental and physical health information
• Therapy notes and clinical observations
• Personal history shared during sessions
• Relevant safeguarding information

This data is treated as strictly confidential and is processed with additional safeguards.

c) Website and technical data

• IP address
• Browser type and device information
• Website usage data (via cookies or analytics tools)

4. How I use your information

Your information is used to:

• Provide psychotherapy services
• Maintain accurate clinical records
• Manage appointments and communication
• Respond to enquiries
• Ensure safety and safeguarding
• Comply with legal and professional obligations
• Improve website performance and usability

5. GDPR Statement (Legal Basis for Processing)

Under the UK General Data Protection Regulation (UK GDPR), I process personal data under the following lawful bases:

• Article 6(1)(b): Contract – to provide psychotherapy services
• Article 6(1)(c): Legal obligation – for record keeping and safeguarding requirements
• Article 6(1)(f): Legitimate interests – for website security and administration
• Article 9(2)(h): Provision of health or social care – for processing sensitive personal data related to therapy
• Article 9(2)(a): Explicit consent – where required (e.g. initial contact enquiries or optional communications)

Where consent is used as a legal basis, you may withdraw it at any time.

6. Confidentiality

All therapy sessions and records are treated as confidential.

Confidentiality will only be broken in exceptional circumstances, including:

• Serious risk of harm to you or others
• Safeguarding concerns involving a child or vulnerable adult
• Legal obligation (e.g. court order or statutory requirement)

Where possible, I will discuss this with you before any disclosure is made.

7. Data storage and security

Your data is stored securely using password-protected and/or encrypted systems.

Paper records are stored in locked storage.

I retain clinical records for 8 years after therapy ends, in line with professional guidance and insurance requirements.

8. Cookies and website analytics

This website may use cookies to:

• Ensure core website functionality
• Monitor website traffic and usage
• Improve user experience

You can control or disable cookies through your browser settings.

9. Sharing your information

I do not sell or trade your data.

Your information may only be shared where necessary with:

• Professional supervisor (anonymised where possible)
• Secure IT/administrative service providers
• Legal or safeguarding authorities if required by law

All third parties are required to comply with data protection obligations.

10. Your rights under UK GDPR

You have the right to:

• Access your personal data
• Request correction of inaccurate data
• Request deletion (where legally possible)
• Restrict or object to processing
• Withdraw consent (where applicable)
• Request data portability (where applicable)

To exercise your rights, contact: yourstorypsychotherapy@hotmail.com

You also have the right to complain to the Information Commissioner’s Office (ICO): https://ico.org.uk

11. Third-party links

This website may include links to external sites. I am not responsible for the content or privacy practices of those websites.

12. Changes to this Privacy Policy

This policy may be updated periodically. The most recent version will always be available on this page.