.jpg){kind=logo}
Privacy Notice
1. About me and this Privacy Notice
I am Maya Anderson, a psychotherapist and supervisor providing counselling, psychotherapy, EMDR, couples counselling and supervision.
I am registered with the UK Council for Psychotherapy (UKCP) and am a member of the United Psychotherapy Counselling Association (UPCA), the British Association for Counselling and Psychotherapy (BACP) and EMDR Association UK.
I work in accordance with the professional, ethical and confidentiality requirements applicable to my registration and memberships.
I am the data controller responsible for the personal information I collect and use in connection with my professional practice and this website.
I am registered with the Information Commissioner's Office (ICO) as a data controller.
I take the privacy and confidentiality of people who contact me or use my services seriously.
This Privacy Notice explains how I collect, use, store, protect and share personal information when you:
visit this website;
Contact me through this website, by email or telephone;
Make a booking through the Wix Bookings system on this website;
Enquire about counselling, psychotherapy or supervision;
Book a free consultation or initial therapy session;
Receive counselling, psychotherapy, EMDR, couples counselling or supervision from me; or
Otherwise communicate with me in connection with my professional practice.
This notice explains your rights and how I handle your personal information in accordance with applicable UK data-protection law, including the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
It should be read alongside any information I provide to you about confidentiality, therapy arrangements and the terms of working together.
2. What personal information I collect
Depending on the circumstances, I may collect and process information including:
Contact and identification information
your name;
email address;
telephone number;
contact preferences;
availability;
information needed to arrange appointments; and
information you provide when making an enquiry or booking.
Information relating to bookings
If you make a booking through the Wix Bookings system on this website, I may receive and process information necessary to manage your booking.
This may include:
your name;
email address;
telephone number;
appointment or booking details;
information you provide through the booking form; and
information relating to the status or administration of your booking.
Wix Bookings may also create or maintain a client/contact record within the Wix system in connection with your booking.
Information relating to therapy or supervision
If you become a client or supervisee, I may need to process information relevant to the work we undertake together.
This may include:
information about your personal circumstances;
information about your emotional or psychological wellbeing;
information about your physical or mental health;
information about previous or current treatment;
information about relationships, family circumstances or other relevant aspects of your life;
information discussed during therapy or supervision;
relevant correspondence and communications;
appointment information;
professional records and notes; and
other information that is relevant and necessary for the service being provided.
Some of this information may constitute special category personal data, particularly information concerning physical or mental health.
I aim to collect and retain only information that is relevant and necessary for the purposes for which it is used.
Information relating to safeguarding or legal matters
Where relevant and necessary, I may process information concerning safeguarding, serious risk of harm, legal proceedings, professional complaints, regulatory matters, insurance matters or other circumstances in which I have a legal or professional responsibility to act.
Website and technical information
When you visit my website, technical information may be collected automatically by Wix or by the services used to operate the website.
This may include information such as:
your IP address;
browser and device information;
general technical information;
information about how the website is used; and
information collected through cookies or similar technologies.
3. How I collect your information
I may collect personal information directly from you when you:
complete a contact or enquiry form;
make a booking through Wix Bookings;
email me;
telephone me;
communicate with me by another agreed method;
arrange or attend an appointment;
become a client or supervisee; or
provide information during therapy or supervision.
I may also receive information from third parties where this is necessary and lawful, for example where information is provided with your knowledge or consent, or where there is a legal, safeguarding or professional reason for doing so.
I do not routinely obtain personal information about clients from publicly available sources.
4. How I use your information
I use personal information only where there is a lawful and appropriate reason for doing so.
Depending on the circumstances, I may use your information to:
respond to enquiries;
manage and respond to bookings;
arrange free consultations and initial therapy sessions;
communicate with you about counselling, psychotherapy or supervision;
arrange appointments;
provide and manage therapy or supervision;
maintain appropriate professional records;
communicate with you during an ongoing therapeutic or supervisory relationship;
process payments and manage financial administration;
obtain professional supervision;
obtain professional, legal, insurance or regulatory advice where necessary;
manage safeguarding concerns where necessary;
comply with legal or regulatory obligations;
deal with complaints or professional concerns;
protect the security of my practice and information systems;
respond to lawful requests from public authorities;
establish, exercise or defend legal claims; and
operate and maintain this website.
I do not use your therapy information for advertising or marketing purposes.
I do not sell your personal information.
5. Lawful bases for using your information
I only process personal information where I have an appropriate lawful basis under UK data-protection law.
The lawful basis I rely on depends on the purpose for which the information is being processed.
Providing therapy or supervision
Where necessary to arrange or provide therapy or supervision that you have requested, I may process your personal information because it is necessary to take steps at your request before entering into an agreement with you and, where applicable, to perform the agreement for the provision of my services.
Website bookings and consultations
Where you use Wix Bookings to book a free consultation or an initial therapy session, I may process your personal information because it is necessary to take steps at your request before entering into an agreement with you and, where applicable, to arrange or provide the service you have requested.
Responding to enquiries
When you contact me about therapy or supervision, I may process the information you provide in order to respond to your enquiry and, where appropriate, take steps at your request before entering into a therapeutic or supervisory relationship.
Managing my professional practice
I may rely on legitimate interests where necessary to manage and administer my professional practice, communicate with clients and prospective clients, maintain appropriate professional records, protect my legal and professional interests, obtain professional advice or supervision, and manage the security of my systems.
Where I rely on legitimate interests, I consider whether the processing is necessary and whether my interests are overridden by your rights and freedoms.
Legal and regulatory obligations
I may process personal information where this is necessary to comply with a legal or regulatory obligation.
Consent
Where I specifically ask for your consent to a particular use of your information and consent is the appropriate lawful basis, I will ask for your consent.
Where I rely on consent, you can withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before consent was withdrawn.
I do not rely on consent where another lawful basis is more appropriate.
6. Health information and other special category information
Information concerning physical or mental health is special category personal data under UK data-protection law and requires additional protection.
Counselling, psychotherapy and EMDR necessarily involve processing information about health, including information concerning emotional or psychological wellbeing, mental health, previous or current treatment and other information relevant to therapeutic care.
Where I process special category information, I rely on both:
-
an appropriate lawful basis under Article 6 of the UK GDPR; and
-
an applicable condition under Article 9 of the UK GDPR.
Health and social care — Article 9(2)(h)
For the necessary processing of health information in connection with the provision and management of counselling, psychotherapy and EMDR services, I rely, where the statutory requirements are satisfied, on Article 9(2)(h) of the UK GDPR — health or social care.
The corresponding condition in UK law is Data Protection Act 2018, Schedule 1, Part 1, paragraph 2 — health or social care.
This condition permits necessary processing for purposes including the provision of health or social care or treatment, subject to the applicable legal safeguards.
I only rely on this condition where the processing is necessary and proportionate for the relevant therapeutic purpose. I do not process health information merely because it is sensitive.
Professional confidentiality
Article 9(2)(h) is subject to safeguards concerning professional secrecy and confidentiality.
I am a UKCP-registered psychotherapist and a member of UPCA, BACP and EMDR Association UK. I practise in accordance with the professional and ethical requirements applicable to my professional registration and memberships, including requirements concerning confidentiality, privacy, appropriate record keeping and the secure handling of client information.
My professional registration, memberships and applicable professional and legal confidentiality obligations form part of the framework within which I provide therapeutic services and process confidential client information.
Other special category information
Therapeutic work may also involve information that falls within other categories of special category personal data, for example information concerning sexual orientation, sex life, racial or ethnic origin, religious or philosophical beliefs or other sensitive matters.
Where such information is processed, I will identify and rely on the Article 9 condition that is appropriate to the particular processing activity.
I maintain internal records of my lawful bases and special category processing as part of my data-protection accountability obligations.
I take particular care to minimise the amount of sensitive information I collect, retain and disclose and only process information that is relevant and necessary for the purpose concerned.
7. Confidentiality
Confidentiality is an essential part of therapeutic work.
I am a UKCP-registered psychotherapist and a member of UPCA, BACP and EMDR Association UK. I work within the professional and ethical standards applicable to my registration and memberships, including requirements concerning confidentiality, privacy, records and the secure handling of client information.
Information you share with me in therapy or supervision will normally be treated as confidential and will not be disclosed to other people without your knowledge or consent unless there is a lawful and professionally justified reason for doing so.
Confidentiality is not absolute. There are circumstances in which information may need to be processed or disclosed, including where:
-
there is a serious risk of significant harm to you or another person;
-
there is a safeguarding concern;
-
disclosure is required by law;
-
disclosure is necessary to comply with a court order or other legal obligation;
-
disclosure is necessary to protect someone from serious harm;
-
I need to obtain appropriate professional, legal or insurance advice;
-
disclosure is necessary in connection with a professional or regulatory matter;
-
disclosure is otherwise permitted or required by applicable law; or
-
you have given appropriate consent to disclosure.
I will consider carefully whether disclosure is necessary and proportionate in the circumstances and, where possible, will limit disclosure to the information that is necessary for the relevant purpose.
Where it is safe and appropriate to do so, I will discuss a proposed disclosure with you before information is shared.
There may, however, be circumstances where I cannot tell you in advance that information will be disclosed, including where doing so could create a risk of harm, prejudice a safeguarding process or conflict with a legal obligation.
8. Professional supervision
As part of my professional practice, I receive professional supervision.
I may discuss aspects of my professional work with my supervisor where this is necessary for safe, ethical and effective practice.
Where practicable, information discussed in supervision will be anonymised or pseudonymised. Personally identifiable information will only be shared where this is necessary and appropriately justified.
Professional supervision is subject to appropriate confidentiality and the relevant professional, ethical and legal requirements.
9. Professional records
I keep appropriate professional records relating to the services I provide.
These records may include:
relevant communications;
correspondence;
appointment information;
notes;
information discussed during therapy or supervision;
information relevant to safeguarding;
information relevant to professional decision-making; and
other information necessary for the proper and lawful provision of my services.
My professional records may therefore include communications, notes and other information relating to clients and supervisees.
I aim to ensure that records are factual, adequate, relevant and proportionate to the service being provided.
Records are stored securely and are only accessed or disclosed where there is an appropriate professional, legal or operational reason to do so.
10. Who may have access to your information
Depending on the circumstances, your personal information may be accessed by:
me;
my professional supervisor;
relevant professional, legal or insurance advisers where necessary;
Wix, which provides the website platform, Wix Bookings and related website services;
Zoom, which I use to provide online therapy and supervision sessions;
PayPal, where you choose to make a payment through PayPal;
my bank or banking service where you make a payment by BACS;
relevant professional or regulatory organisations where disclosure is required or appropriately authorised; and
public authorities or other third parties where disclosure is required or authorised by law.
Wix Bookings allows potential clients to book a free consultation or an initial therapy session through my website. Wix may therefore process information such as your name, contact details, booking details, appointment information and information provided through the booking form.
Where a third-party organisation processes personal information on my behalf, I take reasonable steps to ensure that appropriate contractual, confidentiality, security and data-protection arrangements are in place.
I only share information that is necessary and appropriate for the relevant purpose.
I do not sell personal information to third parties.
11. Payments
I accept payments by PayPal (credit and debit card) and BACS.
Where you make a payment by PayPal, PayPal may process personal and transaction information in accordance with its own privacy practices.
Where you make a payment by BACS, payment information may be processed through my bank as necessary to receive and reconcile the payment.
I retain financial information where necessary for accounting, tax, legal, insurance or other applicable obligations.
12. Online therapy and Zoom
I provide therapy and supervision online using Zoom.
Online communication involves particular privacy and security considerations. I take reasonable measures to protect the confidentiality and security of online sessions and related communications.
You are responsible for taking reasonable steps to ensure that you are in a private and appropriate environment when attending an online session.
I do not record therapy or supervision sessions.
I do not use automated transcription, automated meeting summaries or AI-based analysis of therapy or supervision sessions.
Zoom may process certain technical and account information as necessary to provide its online meeting services.
Information about how Zoom processes personal information is available in Zoom's own privacy information.
13. Artificial intelligence
I do not use artificial intelligence tools to record, transcribe, analyse or summarise therapy or supervision sessions.
I do not enter identifiable client information into generative AI systems for the purpose of analysing or processing your therapy or supervision information.
If my use of digital or AI-based technology changes in a way that materially affects how your personal information is collected, used, stored or disclosed, I will review the relevant privacy and confidentiality implications and update this Privacy Notice where appropriate.
14. Website enquiries and online bookings
If you contact me through the website enquiry form, I will use the information you provide to respond to your enquiry and, where appropriate, to arrange an initial consultation or appointment.
Potential clients can also book a free consultation or an initial therapy session through the Wix Bookings system on this website.
When you make a booking through Wix Bookings, Wix may process information necessary to create and manage the booking. This may include your name, contact details, appointment information and information provided through the booking form.
The website enquiry form may collect information such as:
your name;
email address;
telephone number; and
your availability.
Please do not include highly sensitive information in the website enquiry form or booking form.
In particular, please do not provide detailed information about your mental health, medical history, trauma, safeguarding concerns or other highly sensitive personal circumstances.
A brief description of what you are looking for is sufficient.
If you decide to proceed with therapy or supervision, relevant personal information can be discussed through appropriate and more private communication.
Website enquiries and bookings are not themselves a substitute for a therapeutic assessment or clinical communication.
15. Email and electronic communications
I use Wix Email Mailbox for email communication relating to my professional practice.
I may communicate with you by email, telephone or other agreed electronic methods where necessary to arrange appointments, respond to enquiries or provide services.
Electronic communications can carry privacy and security risks.
Please avoid including detailed or highly sensitive therapeutic information in ordinary email messages unless we have specifically agreed that this is an appropriate method of communication.
Relevant communications may form part of my professional records where necessary.
16. Cookies and similar technologies
This website is operated using Wix.
I use the Usercentrics for Wix cookie consent system to manage cookie consent.
My current Wix website scan identifies the following website components:
Wix CMS — Essential
Usercentrics for Wix — Essential
The current scan does not identify any non-essential analytics or marketing components.
Essential cookies and similar technologies may be used where they are necessary for the security, operation and functionality of the website.
If non-essential cookies or similar technologies are introduced in the future, I will review the cookie settings and consent requirements and update this Privacy Notice where appropriate.
You can manage or change your cookie preferences using the cookie settings provided on this website.
Wix states that its Usercentrics cookie banner is designed to load only essential cookies and scripts initially and to obtain consent before non-essential categories such as analytics or marketing cookies are used.
The website's cookie configuration may change if new Wix applications, integrations or custom code are added. Wix also notes that third-party apps and custom code may introduce technologies that its cookie banner does not necessarily control.
17. International data transfers
Some of the service providers I use may process personal information outside the UK.
This may include website, online meetings, email, payment or other technology providers.
Where personal information is transferred outside the UK, I will ensure that the transfer is made in accordance with applicable UK data-protection law and that an appropriate transfer mechanism or safeguard is used where required.
Information about international transfers carried out by third-party service providers may also be available in their own privacy notices.
If you are physically located outside the UK when receiving therapy from me, additional legal, professional, regulatory and insurance requirements may apply to the provision of therapy in your country or jurisdiction.
18. How I protect your information
I take reasonable and appropriate measures to protect personal information against:
unauthorised access;
accidental loss;
destruction;
alteration;
inappropriate disclosure; and
other forms of unauthorised or unlawful processing.
Because therapy information can be highly sensitive, I take particular care with the security of information relating to clients and supervisees.
I use appropriate security measures for the systems and services I use to store, communicate and process personal information.
No method of electronic transmission or storage can be guaranteed to be completely secure, but I take reasonable steps to reduce the risks.
19. How long I keep your information
I retain personal information only for as long as it is necessary for the purposes for which it was collected and in accordance with my professional, legal, regulatory and insurance responsibilities.
My standard retention period for client therapy and supervision records is seven years after the end of the therapeutic or supervisory relationship, unless a different period is required or justified by the particular circumstances.
Information relating to website enquiries and bookings may be retained for as long as necessary to manage the enquiry or booking and for relevant legal, professional, administrative or record-keeping purposes.
Where a person becomes a client or supervisee, relevant information may form part of their professional records and may therefore be retained in accordance with my professional record-retention period.
Different types of information may be retained for different periods where necessary.
For example, information relating to financial, legal, regulatory or insurance matters may need to be retained for a different period.
When information is no longer required, it will be securely deleted or destroyed.
20. Your data-protection rights
Under UK data-protection law, you may have rights including:
the right to be informed about how your personal information is used;
the right to request access to your personal information;
the right to request correction of inaccurate or incomplete information;
the right to request erasure of personal information in certain circumstances;
the right to request restriction of processing in certain circumstances;
the right to object to certain processing; and
the right to data portability in certain circumstances.
Where I rely on your consent as the lawful basis for processing, you have the right to withdraw that consent at any time.
Withdrawal of consent does not affect the lawfulness of processing carried out before consent was withdrawn.
These rights are subject to legal conditions and exemptions and may not apply in every circumstance.
In particular, professional, legal or regulatory obligations may mean that certain information cannot be deleted or that access to certain information may be restricted.
If you wish to exercise any of your data-protection rights, please contact me using the details below.
21. How to contact me
If you have any questions about this Privacy Notice or about how I handle your personal information, please contact me:
Maya Anderson
Email: maya@counselling-therapy.com
22. Complaints about personal information
If you have concerns about the way I have handled your personal information, please contact me first so that I have an opportunity to understand and address your concern.
You also have the right to complain to the Information Commissioner's Office (ICO), which is the UK's independent supervisory authority for data protection.
You can find information about making a complaint on the ICO's website:
https://ico.org.uk/make-a-complaint/�
23. Changes to this Privacy Notice
I may update this Privacy Notice from time to time to reflect changes to my services, technology, legal requirements or the way in which personal information is processed.
The date at the end of this Privacy Notice shows when it was last updated.
Where appropriate, I will notify clients of significant changes that affect how their personal information is handled.
Last updated: September 2026