Privacy Notice
Your privacy is important to me. I collect and process your personal information in accordance with UK data protection laws, including the UK GDPR and Data Protection Act 2018.
Who I Am
I am the data controller responsible for your personal information. I am registered with the Information Commissioner’s Office (ICO), registration number ZB165682. You can contact me at rachelbrislane@outlook.com.
How I Use Your Information
Initial Enquiries
When you contact me with an enquiry about therapy services, I will collect the information necessary to respond to your enquiry. This may include your name, contact details, and a brief outline of the issues you would like support with.
You may contact me directly, or your details may be provided by a GP, healthcare professional, parent, or trusted individual acting on your behalf.
If I do not hear anything further from you, or if you decide not to proceed with therapy, I will assume that you do not wish to proceed and all personal information you have provided will be deleted and/or destroyed within one month of your enquiry.
During therapy
Information shared in therapy is confidential unless:
-
I consider there is a risk of serious harm to yourself or others.
-
Disclosure is required by law (e.g. disclosures of drug trafficking, terrorism or money laundering).
-
If I am ordered by a court to disclose a copy of my notes.
-
Child protection issues/concerns.
I will always try to speak to you about this first, unless there are safeguarding issues that prevent this.
I keep a record of your personal details, and I may keep written notes of our sessions. These are securely stored on my laptop in a password-protected document or in a locked filing cabinet.
Emails and texts will be deleted after one month.
After therapy Ends
Records relating to your therapy will be retained for a period of seven years after therapy has ended, in accordance with my professional and insurance requirements. After this retention period, records will be securely destroyed. In some circumstances, you may request access to, correction of, or deletion of your personal information; however, where records are required to be retained for legal, regulatory, professional, or insurance purposes, I may be unable to delete them before the end of the retention period.
Legal basis for holding your information
The UK GDPR requires me to have a lawful basis for processing your personal data. Different lawful bases apply at different stages of our work together.
-
If you are currently receiving therapy from me, or if you are in contact with me to arrange or consider therapy, I process your personal data where it is necessary for the performance of a contract, or to take steps at your request before entering into a contract.
-
If you have previously received therapy from me and our work has ended, I retain and process your personal data under the lawful basis of legitimate interests, including maintaining appropriate professional records and meeting insurance requirements.
The UK GDPR also provides additional protection for sensitive personal information, known as special category personal data. Information relating to your physical or mental health falls within this category.
-
The lawful basis for processing special category personal data at the start of our work together is your explicit consent.
-
Following the end of therapy, I may retain therapy records where necessary for the establishment, exercise, or defence of legal claims, and to meet professional, regulatory, or insurance requirements.
Sharing Information
Personal information is not shared with third parties unless required for legitimate service delivery or legal obligations, and appropriate safeguards are in place.
Your Rights
You have the following rights under UK GDPR:
-
Right of access
-
Right to rectification
-
Right to erasure (however, there may be circumstances where I am required to retain certain records for legal, regulatory, professional, insurance, or safeguarding reasons).
-
Right to restrict processing
-
Right to data portability
-
Right to object
-
Right to withdraw consent (where processing is based on consent)
-
Rights relating to automated decision-making and profiling
To make a request for any personal information I may hold about you, please put the request in writing addressing it to rachelbrislane@outlook.com. I will respond within one month, as required by UK GDPR.
If you are unhappy with how I have processed your personal information, you have the right to lodge a complaint with the Information Commissioner’s Office (ICO), the UK’s independent authority for data protection. For further information about your rights and how to make a complaint, please visit the ICO website: https://ico.org.uk/for-the-public/
Data Security
I take appropriate measures to protect your information, including password-protected electronic devices, and secure storage of paper records in a locked filing cabinet.
Website Privacy
This website is hosted by Wix. When you visit the site, certain information may be collected automatically by Wix to help the website function securely and effectively. This may include technical information such as your IP address, browser type, device information, and pages visited.
I do not use this website to collect sensitive personal information and there is currently no contact form on this site. If you choose to contact me by email or telephone, any information you provide will be handled in accordance with my Privacy Notice.
Cookies and Analytics
This website may use cookies and similar technologies provided by Wix to help the website function properly, maintain security, and improve the user experience.
I do not currently use Google Analytics. If analytics tools are introduced in the future, this Privacy Notice will be updated to explain what information is collected and how it is used.
You can control or disable cookies through your browser settings. For more information about the cookies used by Wix, please refer to Wix's privacy and cookie information.
Third-Party Services
This website may contain links to external websites. I am not responsible for the privacy practices of other websites and encourage you to read their privacy policies.
Effective: July 2026
Last revised: July 2026