Introduction

​​

Protecting your privacy is important to me. This Privacy Notice explains how I collect, use, store and protect your personal information when you visit my website, contact me, or engage in psychotherapy services.

I am committed to handling your information in accordance with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, and the ethical requirements of my professional body.

​

​

Who I Am

​

Janathan (Jay) Rasaiyaah
Psychotherapist
Healing-Connection

​

Email: jay@healing-connection.com

I am the data controller for the personal information you provide.

​

​

What Information I Collect

​​

When You Contact Me

If you complete the contact form on my website or contact me by email or telephone, I may collect:

• Your name

• Email address

• Telephone number

• Preferred contact method

• Information you choose to share about your reasons for seeking therapy

​

During Therapy

If we begin working together, I may collect:

• Contact details

• Date of birth

• Emergency contact information

• GP details (where relevant)

• Information relating to your health and wellbeing

• Session notes and administrative records​

Some of this information may be considered "special category data" under UK GDPR because it relates to your physical or mental health.

​

​

Website Usage Information

​

My website may automatically collect limited technical information, such as:

• IP address

• Browser type

• Device information

• Pages visited

• Date and time of visits

​

This information helps maintain website security and improve website performance.

​

​

Why I Collect Your Information

​​

I collect and process personal information to:

• Respond to enquiries

• Assess whether therapy is appropriate for your needs

• Arrange appointments

• Provide psychotherapy services

• Maintain clinical records

• Manage administration and payments

• Meet professional, legal and ethical obligations

• Ensure website functionality and security

 

​

Legal Basis for Processing

​​

Under UK GDPR, I process personal information on the following legal bases:

​

Legitimate Interests

To respond to enquiries, manage my practice, and communicate with prospective and existing clients.

​

Contract

To provide psychotherapy services once we agree to work together.

​

Legal Obligations

To comply with legal and regulatory requirements.

​

Special Category Data

Health-related information is processed for the provision of health and therapeutic services and in accordance with Article 9 of UK GDPR.

​

​

Confidentiality

​​

Everything discussed within therapy is treated as confidential and handled with respect and care.

​

Confidentiality is a fundamental part of the therapeutic relationship and helps create a safe environment in which you can explore personal experiences and concerns. Information shared in therapy will not normally be disclosed to anyone outside the therapeutic relationship without your knowledge and consent.

​

There are, however, exceptional circumstances where confidentiality may need to be limited. These include:

• Where there is a serious concern about your safety or the safety of another person.

• Where there are safeguarding concerns involving a child or vulnerable adult.

• Where disclosure is required by law, court order, or other legal obligation.

• Where disclosure is necessary to prevent serious crime.

• Where professional or ethical responsibilities require consultation or action.

Wherever possible, and unless doing so would increase risk or be unlawful, I will seek to discuss any proposed disclosure with you before taking action.

​

​

Professional Supervision

​​

As a registered member of the British Association for Counselling and Psychotherapy, I engage in regular professional supervision in accordance with BACP ethical requirements.

​

Supervision helps ensure that I work safely, ethically and effectively. Client work may be discussed within supervision, but identifying information is kept to a minimum wherever possible. Supervisors are themselves bound by professional confidentiality and data protection obligations.

​

​

Online Therapy

​​

Where therapy is provided online, I use secure communication platforms and take reasonable steps to protect the privacy of our sessions.

​

However, no internet-based communication can be guaranteed to be completely secure. Clients are encouraged to use a private space and secure internet connection when attending online sessions.

​

​

In-Person Therapy

​​

If I provide face-to-face therapy services, information collected and stored will be managed in the same way as for online clients and in accordance with this Privacy Notice.

​

​

How Your Information Is Stored

​​

I take appropriate measures to protect personal information, including:

• Password-protected devices

• Secure electronic storage

• Encryption where appropriate

• Restricted access to records

• Secure disposal of records when no longer required

 

​​

How Long Information Is Retained

​​

In accordance with UK data protection legislation, professional practice requirements, and guidance relating to counselling and psychotherapy records, information is retained only for as long as necessary.

​

Enquiries

If you contact me but do not proceed to therapy, I will normally retain your enquiry information for up to 12 months after our last communication, after which it will be securely deleted unless there is a legitimate reason for longer retention.

​

Adult Client Records

If we work together therapeutically, records relating to your therapy, including assessment information, correspondence and clinical notes, will normally be retained for 7 years after the end of therapy. This reflects common professional practice, insurance requirements and guidance used across the counselling and psychotherapy professions.

​

Clients Under 18

Where therapy is provided to a person under the age of 18, records may be retained until the client's 25th birthday, or longer where required by law, safeguarding considerations, or insurance requirements.

​

At the end of the relevant retention period, records will be securely destroyed or permanently anonymised.

​

​

Sharing Information

​​

Your personal information will not be sold or used for marketing purposes.

​

Information may be shared only when necessary with:

• Professional supervisors

• Professional indemnity insurers

• Accountants or payment providers

• IT service providers supporting secure business operations

• Legal or regulatory authorities where required

 

Any sharing will be limited to what is necessary and appropriate.

​

​

Contact Form

​​

When you submit information through the website contact form, the information you provide is transmitted and stored securely.

​

Please avoid including extensive sensitive personal information in your initial enquiry. More detailed information can be discussed during a consultation if appropriate.

​​

​

Cookies

​​

This website may use cookies to improve functionality and understand website usage.

​

You can manage cookie preferences through your browser settings.

​

​

Your Rights

​​

Under UK data protection law, you have the right to:

• Request access to your personal information

• Request correction of inaccurate information

• Request deletion of information in certain circumstances

• Request restriction of processing

• Object to certain types of processing

• Withdraw consent where consent is relied upon

• Lodge a complaint with the data protection regulator

 

​

Complaints

​​

If you have concerns about how your information is handled, please contact me in the first instance.

​

You also have the right to complain to the Information Commissioner's Office.

​

ICO Website: https://ico.org.uk/

​

​

Contact

​​

If you have any questions about this Privacy Notice or how your personal information is handled, please contact:

​

Janathan (Jay) Rasaiyaah
Email: jay@healing-connection.com