1. Who I Am

NDT Counselling is a private counselling practice based in Stourbridge, West Midlands, UK. I am the data controller for the personal information you provide.

2. What Information I Collect

I may collect the following information:

• Your name and contact details
• Emergency contact details (where appropriate)
• Relevant personal history and health information
• Session notes and records
• Correspondence between us (email, phone, etc.)

3. How Your Information Is Used

Your information is used to:

• Provide counselling services
• Maintain accurate and safe records
• Communicate with you about appointments
• Meet legal, ethical, and professional requirements

4. Lawful Basis for Processing

Your data is processed on the basis of:

• Your consent
• The provision of health-related services (Article 9(2)(h) GDPR)
• Compliance with legal and professional obligations

5. Confidentiality

All sessions are confidential. However, confidentiality may be broken where:

• There is risk of serious harm to yourself or others
• There is a legal obligation (e.g. court order)
• Safeguarding concerns arise

6. Data Storage & Security

Your data is stored securely using password-protected systems and locked storage. Email communication is not fully secure, so please avoid sharing highly sensitive information via email.

7. Data Retention

Client records are typically retained for up to 7 years after the end of counselling, in line with professional and insurance guidance.

8. Your Rights

You have the right to:

• Request access to your data
• Request correction of inaccurate data
• Request deletion (where legally appropriate)
• Withdraw consent
• Lodge a complaint with the ICO

9. Contact

If you have any questions about this privacy notice or how your data is handled, please contact:

hello@ndtcounselling.co.uk