Privacy Policy.

Note: This is a starting draft of a UK GDPR-compliant privacy policy. Specific data processors, retention periods and contact details should be reviewed and confirmed by Andrew before the site goes live.

Who we are

Thrive Counselling Centre is a private counselling practice run by Andrew, a BACP-registered counsellor based at Acorn House, 381 Midsummer Boulevard, Milton Keynes, MK9 3HP. For the purposes of UK GDPR, Andrew is the Data Controller for any personal information you share with the practice.

Contact: info@thrivecounsellingcentre.com

What we collect

We only collect what’s necessary to provide therapy services and respond to your enquiries:

• From the contact form: name, email, phone (optional), and anything you choose to write in the message field.
• If you become a client: name, contact details, GP name (only if relevant), an emergency contact, and clinical notes related to your sessions.
• Website analytics: anonymous information about how visitors use this site (pages viewed, country, device). No personal identifiers.

What we don’t do

• We don’t sell your data to anyone, ever.
• We don’t share your details with third-party marketers.
• We don’t use your contact information for promotional emails.
• We don’t track you across other websites.

How we use your information

Personal data is only used for:

• Responding to your enquiry
• Arranging and providing counselling sessions
• Keeping clinical records (a legal and ethical requirement under BACP)
• Processing payments
• Improving the practice through anonymous, aggregate analytics

Lawful basis

We process your data under one or more of these lawful bases:

• Consent, when you fill in the contact form or sign a therapy contract.
• Contract, when you become a client.
• Legitimate interest, for record-keeping required by the BACP ethical framework.
• Legal obligation, where the law requires it (e.g. safeguarding situations).

How long we keep your data

• Contact form enquiries that don’t lead to therapy: deleted after 90 days.
• Therapy records: retained for 7 years after your last session, in line with BACP guidance and professional indemnity insurance requirements.
• Financial records: 6 years, to meet HMRC requirements.

Where your data is stored

Clinical notes are stored securely in line with BACP requirements. Email and any payment processing is handled through UK-/EU-resident providers. Online video sessions use a secure, GDPR-compliant platform. The specific providers in use will be confirmed and listed here before launch.

Confidentiality

Everything you share in therapy is held in strict confidence under the BACP Ethical Framework. The only exceptions are situations where there is a serious risk of harm to you or to someone else, or where disclosure is legally required (e.g. court order, terrorism, money laundering). Where possible, any such disclosure would be discussed with you first.

Your rights

Under UK GDPR, you have the right to:

• Access the personal data we hold about you
• Have inaccurate data corrected
• Have your data deleted (subject to legal retention requirements)
• Restrict or object to certain processing
• Receive your data in a portable format
• Withdraw consent at any time (where consent is the lawful basis)
• Complain to the ICO (ico.org.uk) if you believe we’ve mishandled your data

To exercise any of these rights, email info@thrivecounsellingcentre.com. We respond within 30 days.

Cookies

This site uses a minimal set of cookies, all explained when you arrive via our cookie banner. You can change your preferences at any time. Essential cookies (those needed for the site to function) are always active. Analytics cookies are only set with your consent.

Changes to this policy

We’ll update this page if our practices change. The “last updated” date at the top reflects the most recent revision.

Questions

If anything here is unclear, please email info@thrivecounsellingcentre.com. Asking is welcome, privacy concerns are taken seriously.