Wellbeing Therapies with Abbi Privacy Policy

Privacy Policy

Effective Date: 21.04.2025
Last Updated: 23.07.2025
Therapist Name/Practice: Abbi Brooks – Wellbeing Therapies with Abbi
ICO Registration Number: ZB890885
Contact Email: abbi@wellbeingtherapies.net

1. Introduction

As a qualified Cognitive Behavioural Therapist based in the UK, I take your privacy and confidentiality seriously. This Privacy Policy outlines how I collect, use, and protect your personal information in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

2. Who I Am

I am a sole-trading CBT therapist registered with the Information Commissioner’s Office (ICO) as a data controller. I offer one-to-one therapy sessions online.

3. What Information I Collect

Personal Data

  • Full name

  • Date of birth

  • Contact details (email, phone, address)

  • GP details and emergency contact

Special Category Data

  • Information about your mental and physical health

  • Therapy history or past treatments

  • Session notes and psychological formulations

  • Questionnaires or assessments (e.g. PHQ-9, GAD-7)

4. How I Collect Data

I collect data:

  • Directly from you (via intake forms, website forms, emails, calls, and during therapy sessions)

  • From third parties only with your explicit consent (e.g. GP, insurance provider, or referrer)

5. Why I Collect Your Data

Your personal and sensitive data is collected for the following reasons:

  • To deliver CBT therapy tailored to your needs

  • To assess your progress using recognised CBT tools and outcome measures

  • To communicate with you about appointments

  • To comply with legal and ethical obligations

6. Lawful Basis for Processing

Under UK GDPR, I process your data based on:

  • Contract – to provide you with therapy services

  • Consent – particularly for processing health data

  • Legal obligation – where required (e.g. safeguarding)

  • Legitimate interests – for business and service administration

7. Confidentiality & Sharing Information

All information you share is confidential. I will only share your data if:

  • You give clear, written consent

  • There is a legal requirement to do so (e.g. a court order)

  • I believe there is a serious risk of harm to you or others

  • It is required for professional supervision (in anonymised form)

8. How I Store Your Information

  • Electronic notes are stored securely on encrypted, password-protected systems

  • Paper records (if any) are stored in a locked cabinet

  • Data is not stored on personal devices unless they are encrypted and protected

9. Data Retention

I retain your records for 7 years from the date of your last session.

After this period, your data will be securely deleted or destroyed.

10. Your Rights Under UK GDPR

You have the right to:

  • Access your data

  • Request correction of inaccurate data

  • Request deletion (where legally permitted)

  • Object to or restrict processing

  • Withdraw your consent at any time

  • File a complaint with the ICO at www.ico.org.uk

To exercise your rights, contact me at: abbi@wellbeingtherapies.net

11. Use of Third-Party Services

To support therapy delivery, I may use secure, GDPR-compliant services, such as:

  • Microsoft Teams or Google Meet for online sessions

  • Google Workspace, Google Mail for communications

No data is shared for marketing purposes. I do not sell your information.

12. Changes to This Policy

This policy is reviewed annually or when necessary, due to changes in law or practice. Updates will be posted on my website and available by request.

13. Contact

If you have questions or concerns about how your data is handled, please contact:

Abbi Brooks
Email: abbi@wellbeingtherapies.net
ICO Registration Number: ZB890885
Professional Registration: BABCP