This Privacy Notice explains how I, Ikram Ahmed, trading as The Lighthouse Counsellor, collect, use and protect your personal information. I am the data controller for the information described here, and I am committed to handling it in line with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
What information I collect
- When you contact me (by phone, WhatsApp, email or the website form): your name, contact details and anything you choose to tell me in your message.
- If we work together: contact details, emergency contact or GP details where agreed, session dates and brief session notes, and information about your health and wellbeing that you share during therapy.
Information about your mental and physical health is “special category” data and is given extra protection.
Why I use your information, and the lawful basis
- To respond to your enquiry and arrange an introductory call. Lawful basis: legitimate interests / taking steps at your request before entering a contract.
- To provide therapy and keep appropriate records. Lawful basis: contract; for health information, the provision of health or social care (UK GDPR Article 9(2)(h)) and/or your explicit consent.
- To meet professional, legal and safeguarding obligations. Lawful basis: legal obligation / vital interests where necessary.
Confidentiality and sharing
I do not sell or share your information for marketing. Your information is shared only where necessary, for example:
- in anonymised form with my clinical supervisor, as part of good professional practice;
- where there is a serious risk of harm to you or others, safeguarding concerns, or where I am required by law (where possible, I will discuss this with you first);
- with trusted service providers who help me run my practice (such as secure email or website hosting), who must keep your information safe.
How I keep your information secure
Records are stored securely, with password-protected devices and accounts, and paper notes (if any) are kept locked away. Only I have access to your records.
How long I keep your information
Enquiries that do not lead to therapy are deleted within 3 months. Therapy records are kept for 7 years after our work ends, in line with professional guidance and insurance requirements, and are then securely destroyed.
Your rights
You have the right to:
- access the information I hold about you;
- ask me to correct inaccurate information;
- ask me to delete your information, or restrict how it is used (where this does not conflict with legal or professional obligations);
- object to how your information is used;
- withdraw consent at any time, where I rely on consent.
To use any of these rights, please contact me. You also have the right to complain to the Information Commissioner’s Office (ICO) at ico.org.uk or 0303 123 1113.
Website
This website does not use advertising or tracking cookies. Information sent through the contact form is emailed directly to me and is not used for any other purpose.
Changes to this notice
I may update this notice from time to time.