privacy policy

The privacy and security of your personal data are two of my highest priorities and, to that end, I am registered with the Information Commissioner’s Office (ICO).  To comply with General Data Protection Regulation (GDPR), I keep the personal data that I collect in a locked filing cabinet and/ or on a password-protected server, both of which only I have access to.  The personal data that I collect are minimal, including your name and a means of contacting you, as well as brief, factual notes written at the end of each session to aid memory.  Personal data are kept only for as long as they are required and they will be shredded and/ or deleted when they no longer are, which is usually once we have stopped working together.  Best practice does, however, require me to keep notes of sessions for seven years.