PRIVACY POLICY.

Privacy Statement

Your privacy is very important to me. You can feel confident that any personal information you share will be kept safe, secure, and used only for the purpose it was provided. I follow all relevant data protection laws, including:

The General Data Protection Regulation (GDPR) (EU/2016/679)

The Data Protection Act 2018

The Privacy and Electronic Communications Regulations (PECR) 2003

This privacy notice explains how I handle your personal information—from your first contact with me through to after your counselling sessions have ended.

What This Notice Covers

Why I collect and process your personal information

What information I collect and how I use it

How long I keep your data

Who may receive your data

Whether your data is transferred outside the UK

Your rights under data protection law

How to contact me with questions or concerns

Who I Am

SJE Counselling is run by Steven Eveleigh, a BACP-registered counsellor. I am the data controller for the personal information you share with me.

ICO Registration Number: ZA441597

Phone: 07500 069070

Email: info@steveneveleighcounselling.co.uk

Lawful Basis for Processing Your Data

Under GDPR, I must have a lawful reason to process your personal data:

  • If you are currently in therapy or enquiring about therapy, I process your data as part of our contractual agreement.

  • If your therapy has ended, I retain your data under legitimate interest, in line with professional and insurance requirements.

  • For sensitive information (e.g. health or identity-related data), I process it under the lawful basis of providing health care (counselling).

How I Use Your Information

Initial Contact

When you contact me, I collect basic information such as your name, contact details, and a brief summary of why you're seeking counselling. This may come directly from you, a GP, or someone contacting me on your behalf.

If you decide not to proceed, I will delete your information within 30 days, or sooner if you request it.

During Counselling

Everything you share with me is confidential. I will only break confidentiality if required by law, or if there is a serious risk to your safety or someone else’s. I will always try to discuss this with you first, unless safeguarding concerns prevent it.

I securely store your personal details on encrypted Apple devices (iPhone, iPad, Mac) and do not share them with third parties.

After Counselling

I retain your records for 7 years after your final session, in line with my insurance policy. After that, they are securely destroyed. You may request earlier deletion at any time.

Third-Party Services

I may use trusted third-party services to support my work, such as:

  • Microsoft Office 365 (for secure email communication)

  • Google Analytics (to understand website usage)

  • Squarespace (website hosting and content management)

These services are carefully selected and bound by contracts that ensure your data is handled securely and only for the intended purpose.

Your Rights

You have the right to:

  • Access the personal data I hold about you

  • Request corrections to inaccurate information

  • Ask for your data to be deleted or restricted

  • Object to how your data is used

  • Receive a copy of your data in a readable format

To make a request, please email me at add email. You can also learn more about your rights at ico.org.uk/your-data-matters.

If you have concerns about how I handle your data, I encourage you to contact me directly. You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO): ico.org.uk/make-a-complaint

Website Visitors

When you visit my website, I use Google Analytics to collect anonymous data about how visitors use the site. This helps me improve the website and the services I offer. No personally identifiable information is collected.

  • Learn more about Google Analytics: Google’s Privacy Policy

  • Learn more about Squarespace: Squarespace Privacy Policy

  • Learn about cookies used on this site: Cookie Policy

Data Security

I take data security seriously. All personal data is stored on encrypted devices and protected by strong passwords and secure systems.