Privacy Notice
Last updated: August 2026
Introduction: This Privacy Notice explains how I collect, use, store and protect your personal information in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
If you have any questions about this Privacy Notice or how your information is handled, please feel free to ask.
Who I Am: I am Sophie Jackson, a BACP Accredited Psychotherapist providing psychotherapy to adults and young people aged 16 and over.I am the data controller responsible for the personal information collected and processed as part of my practice.
What Information I Collect: The information I collect may include:
- Your name, address, email address and telephone number
- Your date of birth
- Your GP details
- Emergency contact details
- Information you choose to share with me during our work together
- Administrative information relating to appointments, attendance, cancellations and payments
Where appropriate, I may make brief factual notes to support the safe and effective delivery of therapy and continuity of care.
Why I Process Your Information: I use your personal information to:
- provide psychotherapy
- communicate with you about your therapy
- manage appointments
- maintain appropriate administrative records
- meet my professional, ethical and legal responsibilities
Under UK GDPR, the lawful basis for processing your personal information is that it is necessary for the performance of our therapeutic agreement.
Information relating to your health and wellbeing is classed as special category data. I only process this information where it is necessary to provide safe and professional psychotherapy and to meet my legal and professional responsibilities. This information is processed in accordance with the UK GDPR and the Data Protection Act 2018, using the appropriate lawful basis under Article 6 and the provisions for health or social care under Article 9.
Confidentiality and Sharing Information: I treat the information you share with me confidentially and will not share it without your consent unless I have a legal or professional obligation to do so. Wherever possible, I will endeavour to discuss this with you first.
Examples of circumstances where information may need to be shared include where there is a serious risk of harm, a safeguarding concern, or where disclosure is required by law.
As part of my professional practice, I undertake regular clinical supervision in accordance with the BACP Ethical Framework. Information discussed in supervision is anonymised wherever possible. Where appropriate, and with your consent, I may communicate with other professionals involved in your care, such as your GP or another healthcare professional. I do not sell, rent or use your personal information for marketing purposes. Further information about confidentiality is provided in my Psychotherapy Agreement.
How Your Information Is Stored: I take the security of your personal information seriously. Paper records are stored in a locked filing cabinet in a secure property. Electronic records are stored on password-protected devices using appropriate security measures. I take appropriate technical and organisational measures to protect your personal information from unauthorised access, loss or misuse.
How Long Information Is Kept: Administrative records are retained in accordance with professional, legal and insurance requirements. Any notes made are brief and factual and are retained only for as long as they are required to support the provision of safe and professional psychotherapy. They are then securely destroyed.
Your Rights: Under UK GDPR, you have the right to:
- be informed about how your personal information is used
- request access to the personal information I hold about you
- request that inaccurate or incomplete information is corrected
- request restriction of processing in certain circumstances
- object to certain types of processing
- make a complaint to the Information Commissioner’s Office (ICO)
Some of these rights may be limited where professional or legal obligations apply.
Please let me know if your contact details change during our work together so that my records remain accurate and up to date.
Contact: If you have any questions about this Privacy Notice or wish to exercise any of your rights, please contact:
Sophie Jackson Email: [email protected]
I am registered with the Information Commissioner’s Office (ICO) as a data controller. ICO Registration Number: ZA793222
If you are unhappy with how your personal information has been handled, you have the right to complain to the Information Commissioner’s Office.
Website: www.ico.org.uk
