Privacy Policy

Elbee Counselling customer privacy notice
This privacy notice explains how Elbee Counselling collects, uses, stores, and protects your personal information in line with UK data protection law.
1. Data Controller
Elbee Counselling is the data controller for your personal information.
2. Contact details
Email: lizab.counsellor@gmail.com
Please use this email for any privacy or data protection queries.
3. What information we collect
We may collect the following information:
- Name and contact details (email, phone number, address)
- Date of birth (where relevant)
- Emergency contact details
- Health and wellbeing information
- Counselling session notes
- Relevant information from third parties (only if necessary for care)
- Appointment and payment records
- Correspondence and communications
- Complaints or feedback
4. How we use your information
We use your information to:
- Provide counselling services
- Maintain accurate clinical records
- Manage appointments and communication
- Ensure client safety and safeguarding
- Process payments and administration
- Respond to enquiries, complaints, or concerns
- Comply with legal and professional obligations
5. Lawful bases for processing
We rely on the following lawful bases under UK GDPR:
5.1 General personal data (contact and administration)
- Article 6(1)(f) – Legitimate interests
(to manage appointments, communication, and service delivery)
5.2 Special category data (health and therapy information)
- Article 9(2)(h) – Health or social care provision
(for the provision of counselling and therapeutic services)
5.3 Legal obligations and safeguarding
- Article 6(1)(c) – Legal obligation
- Article 9(2)(c) or (h) – safeguarding or vital interests (where applicable)
We do not rely on consent for the core delivery of counselling services, as this would not be appropriate for clinical records. Consent may be used for optional purposes (such as marketing), and can be withdrawn at any time.
6. Confidentiality
We treat all counselling information as confidential.
We only process personal data where necessary to provide counselling services and meet legal obligations under UK data protection law.
Limits to confidentiality, including situations where information may need to be shared (such as serious risk of harm or legal requirements), are explained in the counselling agreement provided to clients before therapy begins.
7. Data storage and security
Your information is stored securely using password-protected systems and/or locked storage.
We take appropriate technical and organisational measures to protect your data from loss, misuse, or unauthorised access.
8. How long we keep your information
We keep counselling records for 7 years after your final session, in line with professional and insurance requirements.
After this period, records are securely deleted or destroyed.
9. Sharing your information
We do not routinely share your personal information.
We may share information only where necessary for:
- Safeguarding or risk of harm
- Legal obligations
- Professional indemnity or regulatory requirements
- With your consent
10. Your data protection rights
You have the following rights under UK GDPR:
- Right of access
- Right to rectification
- Right to erasure (in some circumstances)
- Right to restrict processing
- Right to object
- Right to data portability (where applicable)
We will respond to any request within one month.
11. Complaints (Data Protection)
If you are unhappy with how your data has been handled, you can contact us using the email above.
We will:
- Acknowledge your complaint within 30 days
- Investigate the issue
- Provide a written response explaining the outcome
If you are not satisfied, you can complain to:
Information Commissioner’s Office (ICO)
Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF
Helpline: 0303 123 1113
https://www.ico.org.uk/make-a-complaint
12. Changes to this notice
We may update this privacy notice from time to time. The latest version will always be available upon request.
Last updated 18th June 2026
