Privacy Policy
Last updated: 26 January 2026
Therapy with Vanessa is committed to protecting your privacy and handling your personal information with care, respect, and confidentiality. This privacy policy explains how personal data is collected, used, stored, and protected when you visit this website or engage with counselling services.
This website and practice aim to provide a safe and confidential space. Please read this policy alongside any other privacy notices that may be provided so you understand how and why your information is used.
Who is responsible for your data?
The data controller is:
Vanessa Bailey
Sole Trader
Therapy with Vanessa
Email: info@therapywithvanessa.co.uk
If you have any questions about this policy or how your data is handled, please contact Vanessa using the details above.
If you are unhappy with how your data has been handled, you have the right to raise a concern with the Information Commissioner’s Office (ICO) at www.ico.org.uk. It is always preferred to try to resolve any concerns directly first.
What personal data is collected?
Personal data means information that can identify you. Depending on how you interact with this website or the services offered, the following types of data may be collected:
Identity data
Name, title, date of birth, and gender
Contact data
Email address, telephone number, and address
Technical data
IP address, browser type and version, operating system, device information, and basic website usage data
Transaction data
Information relating to payments made by bank transfer
Usage data
Information about how you use this website
Marketing preferences
Your preferences regarding receiving newsletters or updates, where you have actively opted in
Special category data
Health and therapeutic information, including mental health history and relevant background information, required to provide counselling services
Special category data is only collected where necessary and with your explicit consent.
How is your data collected?
Your data is collected in the following ways:
When you make contact via the website, email, or phone
When you complete enquiry or intake forms
During counselling sessions and related correspondence
When you opt in to receive newsletters or updates
Through basic website analytics
Technical data may be collected automatically through cookies or analytics tools.
What happens if you do not provide required data?
If certain personal data is required to provide counselling services and it is not supplied, it may not be possible to begin or continue therapy. You will always be informed if this is the case.
How is your personal data used?
Personal data is used for the following purposes:
To respond to enquiries and arrange appointments
To provide counselling and psychotherapy services
To manage payments and administrative requirements
To maintain clinical records in line with professional and legal obligations
To ensure safe and effective therapeutic practice
To send newsletters or updates only where you have explicitly opted in
To maintain and improve the website
Lawful basis for processing data
Data is processed under one or more of the following lawful bases:
Performance of a contract (providing therapy services)
Legal obligation (record keeping and professional requirements)
Legitimate interests (practice administration and website operation)
Explicit consent (for special category health data and marketing)
Cookies
This website uses cookies to improve user experience and understand how visitors use the site. You can manage or disable cookies through your browser settings.
Where applicable, a separate Cookie Policy may provide further detail.
Who your data may be shared with
Your personal data is treated as confidential and only shared where necessary and lawful. This may include:
Clinical supervisors, where identifying details are minimised
Professional advisers such as accountants or insurers
HM Revenue & Customs, where legally required
Medical professionals or safeguarding services, only where there is a serious risk of harm and disclosure is required by law
Data is never sold or shared for third-party marketing purposes.
Online therapy and international data transfers
Online sessions are provided via Microsoft Teams and Zoom.
These platforms may process data outside the UK or EEA. Where this occurs, appropriate safeguards are in place, including recognised international data protection frameworks and contractual protections to ensure compliance with UK GDPR.
How your data is stored and kept secure
Client records are stored securely using encrypted digital systems and/or secure practice management tools. Access is restricted to Vanessa Bailey only.
Appropriate technical and organisational measures are in place to protect against unauthorised access, loss, or misuse.
In the unlikely event of a data breach, appropriate steps will be taken and any legally required notifications made.
How long your data is kept
Personal data is retained only for as long as necessary.
Adult client records are kept for 7 years after therapy ends
Records relating to children and young people are retained until the client’s 25th birthday
Financial records are retained for 6 years in line with tax requirements
Your legal rights
Under UK data protection law, you have the right to:
Access your personal data
Request correction of inaccurate data
Request erasure of data (subject to legal limitations)
Restrict or object to processing in certain circumstances
Request data portability
Withdraw consent where processing relies on consent
Requests can be made by contacting info@therapywithvanessa.co.uk. Responses are usually provided within one month.
Changes to this policy
This privacy policy is reviewed periodically and may be updated. Any significant changes will be reflected on this page.
Contact
If you have questions about this privacy policy or how your data is handled, please contact:
Vanessa Bailey
Email: info@therapywithvanessa.co.uk