Privacy Policy

Introduction

This Privacy Policy explains how Karen Evans collects, uses, stores, and protects personal information in accordance with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, the Data (Use and Access) Act 2025, and the British Association for Counselling and Psychotherapy (BACP) Ethical Framework.

What Information Do I Collect?

I may collect and process the following information:

Information You Provide

Name
Address
Telephone number
Email address
Information submitted through contact forms
Information provided during enquiries about therapy services
Information disclosed during therapy sessions
Payment information where applicable

Special Category Data

As a psychotherapist, I may collect sensitive personal information relating to your physical or mental health, wellbeing, personal circumstances, and other information relevant to the provision of therapeutic services.

Website Information

When you visit this website, certain technical information may be collected automatically, including:

IP address
Browser type and version
Device information
Pages visited
Date and time of visits
Website usage statistics
Cookie and analytics information where applicable

How Is Information Collected?

Information may be collected when you:

Complete a contact form
Send an email
Telephone or text me
Arrange an appointment
Attend therapy sessions
Subscribe to communications
Use this website

Why Do I Collect Personal Information?

I collect personal information for the following purposes:

To respond to enquiries
To provide psychotherapy services
To maintain client records
To communicate regarding appointments
To issue invoices and receive payments
To comply with professional, ethical, legal, and regulatory obligations
To improve website performance and user experience
To protect the safety and wellbeing of clients where required by law or professional duty

Lawful Basis for Processing

Under UK GDPR, personal information is processed under one or more of the following lawful bases:

Performance of a contract
Legitimate interests
Compliance with legal obligations
Consent where required

Where health-related information is processed, this constitutes Special Category Data and is processed in accordance with Article 9 UK GDPR, including where processing is necessary for the provision of health or social care, safeguarding, or the establishment, exercise, or defence of legal claims.

How Do I Store, Use, Share and Protect Your Information?

This website is hosted on WordPress and through my website hosting provider. Information submitted through the website may be stored securely on servers protected by appropriate technical and organisational security measures.

I take reasonable steps to protect personal information from unauthorised access, loss, misuse, disclosure, alteration, or destruction.

Client records are stored securely and access is restricted to authorised persons only.

Sharing Information

Your personal information will be treated as confidential and will not normally be shared with third parties except:

Where you have provided consent
Where disclosure is required by law
Where there is a serious risk of harm to you or another person
For safeguarding purposes
To comply with court orders or regulatory requirements
With professional advisers, supervisors, insurers, accountants, or legal representatives where appropriate and subject to confidentiality obligations

Clinical Supervision

As a registered member of the British Association for Counselling and Psychotherapy (BACP), I undertake regular professional clinical supervision in accordance with the BACP Ethical Framework.
In supervision, aspects of my work may be discussed to support safe and effective practice. Information shared with my supervisor is anonymised wherever possible and both my supervisor and I are bound by professional confidentiality and data protection obligations.

Retention of Information

Personal information will be retained only for as long as necessary to fulfil the purposes for which it was collected and to comply with legal, regulatory, insurance, and professional requirements.
Client records are generally retained for 7 years following the end of therapy in accordance with professional practice, insurance requirements, and applicable legal obligations. After this period, records will be securely destroyed unless there is a lawful reason to retain them for longer.

How May I Contact You?

I may contact you by:

Email
Telephone
Text message
Video conferencing platforms
Postal mail

Communications will be limited to matters relating to therapy services, appointments, administration, legal obligations, or where you have consented to receive other communications.

Your Rights

Under UK data protection law, you have the right to:

Access your personal information
Request correction of inaccurate information
Request erasure of information in certain circumstances
Restrict processing in certain circumstances
Object to processing in certain circumstances
Request transfer of your data where applicable
Withdraw consent where processing is based on consent

Requests should be made using the contact details below.

Data Protection Complaints

If you have concerns about how your personal information is handled, you have the right to make a complaint directly to me.

Complaints can be submitted using the contact details below. I will acknowledge receipt of your complaint, investigate the matter, and respond without undue delay.

If you remain dissatisfied, you may complain to the Information Commissioner’s Office (ICO).

The ICO can be contacted via:
Website: www.ico.org.uk
Telephone: 0303 123 1113

Cookies

This website may use cookies and similar technologies to improve functionality, analyse website traffic, and enhance user experience. You can control cookie preferences through your browser settings.

Changes to This Privacy Policy

This Privacy Policy may be updated from time to time to reflect changes in legal, regulatory, or operational requirements. The latest version will always be available on this website.

Contact Details

If you wish to access, correct, update, or request deletion of your personal information, or if you have any questions regarding this Privacy Policy, please contact:

Karen Evans
3 Langdale Park, Lowestoft, Suffolk NR32 4XF
karen.eastcoasttherapies@gmail.com
07835 487002

Last Updated: June 2026