Privacy Policy - Andrew Perrin Therapy

Last updated: March 2025

Introduction

Your privacy matters deeply to me. This notice explains what personal information I collect when you use my therapy services, why I collect it, and how I handle it. Please read it carefully. If you have any questions, do get in touch.

Contact Details

Andrew Perrin
Email: andy@andyperrin.com
Phone: 07791 608 485

What Information I Collect and Why

To provide therapy services:

• Your name, date of birth, and contact details

• Emergency contact details

• GP name and surgery address

• Presenting concerns, session notes, and case records

• Payment and invoicing information

• Correspondence and any referral information

To run my practice:

• Appointment booking and scheduling records

• Billing and accounting records

For my website:

• Website analytics (page visits, time on site)

• IP addresses and browser information

• Any enquiry form submissions

Lawful Bases and Your Rights

Under UK data protection law, I must have a lawful basis for processing your personal information.

Purpose           >              Lawful Basis
Delivering therapy and maintaining case records.      >        Explicit consent; contract
Billing and accounting.      >        Legal obligation
Clinical supervision (see below).      >        Legitimate interest
Safeguarding or legal disclosure.      >        Legal obligation; vital interests
Website analytics.      >        Legitimate interest

A note on special category data: Your health and mental health information is classed as "special category" data under UK GDPR. I will always seek your explicit consent before collecting this, and I handle it with the highest level of care.

Your rights

You have the right to:
 

• Access copies of your personal information

• Correct inaccurate or incomplete information

• Erase your information in certain circumstances

• Restrict how I use your information

• Object to my processing of your data

• Withdraw consent at any time (though this will not affect processing already carried out, and may mean I am unable to continue providing therapy)

To exercise any of these rights, please contact me using the details above. I will respond within one month.

Where I Get Your Information From
 

• Directly from you, through initial enquiries, intake forms, and sessions

• Referrals from GPs or other healthcare providers

• Publicly available information in limited circumstances (for example, to verify a referral)

Clinical Supervision
 
As a member of the National Counselling and Psychotherapy Society (NCPS), I am required to engage in regular clinical supervision as part of my commitment to safe and ethical practice. I may discuss anonymised case material with my supervisor to ensure I am providing you with the best possible care. Your name and identifying details will not be shared. My supervisor is bound by their own professional confidentiality obligations.

For more information about the NCPS and the ethical framework I work within, visit ncps.com.

Confidentiality and When I May Share Your Information

Everything you share in sessions is confidential.

However, there are limited circumstances where I may need to share information without your consent:
 

• Safeguarding: If I have serious concerns about risk of harm to you or another person, I have a duty to act. I will always try to speak with you first unless doing so would increase that risk.

• Legal obligation: If required to do so by a court order or other legal process.

• GP or other professionals: With your consent, I may liaise with your GP or another relevant professional if clinically appropriate.

I will always tell you if I intend to share information about you, unless doing so is not possible or safe in the circumstances.

How Long I Keep Your Information

Type of record           >              Retention period
Therapy records           >              7 years after the end of therapy
Financial and accounting records           >              6 years (legal requirement)
Website analytics           >              2 years
Enquiry correspondence (no therapy commenced)           >              1 year

After these periods, records are securely destroyed.

How I Store Your Information

Your records are stored securely, either in a locked physical file or using password-protected, encrypted digital systems. I take appropriate technical and organisational steps to protect your data from unauthorised access, loss, or disclosure.

How to Complain

If you have concerns about how I handle your data, please contact me in the first instance so I can try to resolve them.
If you remain unhappy, you have the right to complain to the Information Commissioner's Office (ICO):
Information Commissioner's Office Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF Helpline: 0303 123 1113 Website: ico.org.uk/make-a-complaint

Cookies

My website uses necessary cookies to enable basic functions such as page navigation. I also use analytics cookies to understand how visitors use the site, so I can improve it. By using my website, you consent to this use of cookies. You can disable cookies in your browser settings at any time.