Privacy Policy
I (the therapist) take your privacy seriously. I collect only the information needed to provide psychotherapy safely and professionally. This policy explains what I collect, why, and your rights under UK GDPR and the Data Protection Act 2018.
1. Data I Collect
Your contact details
Session notes (kept to a minimum)
Relevant information you share in therapy
2. Why I Collect It
To provide psychotherapy
To arrange appointments and communicate with you
To meet legal and professional requirements (UKCP)
3. Confidentiality
Everything you share is confidential except if I believe there is serious risk of harm, or if I am legally required to disclose information (e.g., court order, terrorism, money-laundering laws).
I discuss my work in clinical supervision, but your identity is protected.
4. How Your Data Is Stored
Secure digital or locked physical storage
Kept only for as long as necessary (usually up to 7 years after therapy ends)
5. Sharing Your Data
I do not share your information with anyone unless:
you give written consent,
there is serious risk of harm, or
I am legally required to.
6. Your Rights
You have the right to:
access your data
request corrections
request deletion (where legally possible)
complain to the ICO if you are unhappy with how your data is handled
7. Contact
For any questions or data requests, contact:
Sonya Carra (07881854020 or therapy@sonyacarra.co.uk)