Privacy Policy
This policy explains how I collect, use, and protect your personal information when you visit this website or contact me in relation to therapy.
I am committed to handling your information with care, transparency, and in accordance with UK data protection law (UK GDPR and the Data Protection Act 2018).
Cookies
This website may use basic cookies to ensure it functions properly and to understand general usage.
You can disable cookies through your browser settings if you prefer.
Confidentiality
What you share in therapy is treated as confidential.
Information would only be disclosed to a third party in exceptional circumstances where required by law, or where there is a serious safety concern. Wherever possible, this would be discussed with you in advance.
Information I collect
Please note that messages sent via this website may be temporarily stored by the hosting platform. Further information about how your data is processed can be found in their privacy policy here.
I may collect personal information when you contact me or begin therapy. This can include:
Name and contact details
Information shared in enquiries (email, phone, or contact form)
Basic administrative details needed for therapy (e.g. GP details, emergency contact)
Payment and billing information
I may also collect limited technical data through the website, such as IP address or general usage information, to help the site function and improve performance.
I do not collect or store the content of therapy sessions through this website.
How your information is used & stored
Your information is used only where necessary, including:
To respond to enquiries
To arrange and provide therapy
To manage appointments and payments
For basic administrative purposes
To meet legal and professional obligations
I may use fully anonymised material in professional supervision, with no identifying details.
Your information may be held securely in:
Encrypted digital systems
Email correspondence
Paper records (where necessary)
I take reasonable steps to protect your data from loss, misuse, or unauthorised access.
Your information is kept only for as long as necessary:
Clinical and administrative records are retained for up to three years after therapy ends
Financial records are kept for six years in line with legal requirements
After this, data is securely deleted or anonymised.
Your information is not sold or shared for marketing purposes.
It may be shared only when necessary, for example:
With professional supervisors (in anonymised form)
With service providers (such as email, payment, or website platforms)
Where required by law
Some services used (such as email or website hosting) may store data outside the UK. These providers are required to meet appropriate data protection standards.
Your rights
You have the right to:
Access the personal data I hold about you
Request correction of inaccurate information
Request deletion of your data (where applicable)
Restrict or object to how your data is used
Withdraw consent where relevant
If you have any questions about your data, you are welcome to contact me.
You also have the right to make a complaint to the Information Commissioner’s Office (ICO).
Complaints
If you have any concerns about how I handle your personal information, or about any aspect of the work, you are welcome to raise this with me directly so that we can try to address it together.
If you feel unable to do so, or are not satisfied with the outcome, you have the right to make a complaint to the UK Council for Psychotherapy (UKCP), with whom I abide by the Code of Ethics and Professional Practice.
You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO) regarding the handling of your personal data.
Contact
If you have any questions about this policy or how your data is handled, please contact:
karla.psychotherapy@gmail.com
Updates
This policy may be updated from time to time.
Last updated: 20/03/2026