Privacy Policy

At CBT_BY_EC, I take your privacy seriously. This Privacy Policy explains how I collect, use, store, and protect your personal information in line with the UK GDPR and Data Protection Act 2018.

1. Information I Collect

I may collect the following information:

• Personal details (name, contact details, date of birth).

• Health information relevant to your therapy.

• Session notes (kept brief and anonymised).

• Payment details (processed securely via [your payment method]).

2. How I Use Your Information

Your information is used to:

• Provide therapy services.

• Keep records as required by law and professional practice standards.

• Communicate with you about appointments and services.

• Process payments.

I do not share your information with third parties unless required by law (e.g., safeguarding concerns or legal obligations).

3. Confidentiality & Security

• All records are stored securely (password-protected or encrypted).

• Paper records (if any) are kept in locked storage.

• Only I have access to your therapy records.

4. How Long Information is Kept

• Therapy notes are kept for 7 years after your last session (or until a child client turns 25, whichever is longer), in line with professional and legal guidance.

• After this period, records will be securely destroyed.

5. Your Rights

Under UK GDPR, you have the right to:

• Access your personal data.

• Request corrections to inaccurate data.

• Request deletion of your data (where legally possible).

• Withdraw consent to data processing.

6. Cookies & Website Use

My website may use cookies to improve your experience. You can disable cookies in your browser settings if you prefer.

7. Contact

If you have any questions about this Privacy Policy or how your data is handled, please contact:

CBT_BY_EC
📧 ec.b.therapy@gmail.com