Gabriel Counselling logo

Privacy Policy - Gabriel Counselling

Privacy Policy: Gabriel Counselling

Last updated: 15 July 2026

Gabriel Counselling operates gabrielcounselling.co.uk (the “Site”). I am a BACP-registered counsellor, the Data Controller for this practice, and I am registered with the ICO under registration number ZC012240.

What Information I Collect and Why

To provide safe, neuro-affirming, and trauma-informed therapy, I collect:

  • Personal details: Name, address, and contact information.
  • Clinical notes: Brief, anonymised summaries of our sessions.
  • Sensitive data: This may include “special category” data relevant to our work, such as health information, medical history, or neurodivergent status.

Lawful Basis for Processing Data

Under the UK GDPR, I hold and process your data under the following legal bases:

  • Personal Data: Processed under the basis of Contract (to safely fulfil our therapeutic agreement).
  • Special Category (Sensitive) Data: Processed under the basis of Healthcare/Social Care (for the provision of professional therapeutic treatment).

How Your Information is Stored

I use a secure, dual-system approach to ensure your data is protected:

  • Digital Records (Kiku): I use Kiku, a specialist UK-based Practice Management System. All digital data (appointments, billing, and contact details) is stored on their encrypted, password-protected servers.
  • Handwritten Records: Any handwritten session notes are kept securely in a locked filing cabinet in a secure location.
  • Retention: In accordance with professional insurance and BACP guidelines, I retain records for seven years after our work concludes, after which they are securely destroyed.

Limits of Confidentiality

Confidentiality is central to our work. However, I have a professional and legal duty to break confidentiality if:

  • I believe there is a risk of serious harm to yourself or others.
  • I am required to do so by a court of law.
  • I discuss my work with my Clinical Supervisor (with any identifying details strictly removed) to ensure ethical practice.

Your Rights

Under the UK GDPR, you have the right to access your data, request corrections, or ask for your data to be deleted (subject to legal and insurance retention requirements). You also have the right to file a complaint with the ICO (ico.org.uk) regarding data privacy.

Contact

For any data-related queries, please contact me at: gabriel@gabrielcounselling.co.uk