Privacy Policy

How I collect, use, and protect your personal information.

Last updated: May 2026

Counselling with Lana ("I", "me", "my") is committed to protecting your privacy and ensuring your personal data is handled in accordance with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, and the Privacy and Electronic Communications Regulations (PECR).

This policy explains what personal data I collect, why I collect it, how I use and store it, and your rights regarding your data.

1. Who I Am

Counselling with Lana is a private counselling practice operated by Lana, a BACP-registered integrative counsellor based in Southeast London. For the purposes of data protection law, I am the data controller.

Contact: hello@counsellingwithlana.co.uk

2. What Data I Collect

a) Website Enquiry Form

When you contact me via the website enquiry form, I collect:

  • Your name
  • Email address
  • Phone number (if provided)
  • Preferred session type
  • The content of your message
  • Your consent confirmation
  • Your IP address and submission timestamp (for security purposes)

b) Counselling Clients

If you become a client, I may also collect:

  • Contact details (address, emergency contact)
  • Relevant health and medical information
  • Session notes
  • Assessment and outcome information
  • Payment records

c) Website Cookies

This website uses only essential cookies required for the site to function (e.g., session cookies, cookie consent preference). No tracking, analytics, or marketing cookies are used at this time. See the Cookie Policy for full details.

3. Why I Collect Your Data (Legal Basis)

I process your personal data under the following lawful bases as defined by UK GDPR Article 6:

  • Consent (Article 6(1)(a)): When you submit an enquiry form, you give explicit consent for me to process your data to respond to your enquiry.
  • Contractual necessity (Article 6(1)(b)): If you become a counselling client, I process your data as necessary to provide the service you have engaged me for.
  • Legitimate interest (Article 6(1)(f)): To maintain security of the website, prevent fraud, and keep records for professional and legal obligations.
  • Legal obligation (Article 6(1)(c)): Where I am required to retain records to comply with legal, regulatory, or professional requirements.

Where I process special category data (e.g., health-related information), the additional condition under Article 9(2)(a) applies—your explicit consent.

4. How I Use Your Data

  • To respond to your enquiry
  • To arrange and provide counselling sessions
  • To maintain clinical records as required by the BACP Ethical Framework
  • To process payments
  • To comply with legal and professional obligations

I will never sell, rent, or share your personal data with third parties for marketing purposes.

5. Data Storage & Security

Your data is stored securely using the following measures:

  • Electronic records are stored on encrypted, password-protected devices
  • Paper records (if any) are kept in a locked cabinet
  • Access to your data is restricted to me alone
  • Website form submissions are transmitted securely and stored on the hosting server with appropriate technical safeguards

6. Data Retention

  • Enquiry form data: Retained for up to 12 months after our last communication, then securely deleted.
  • Client records: Retained for a minimum of 7 years after our last session, in line with BACP guidance and insurance requirements. After this period, records are securely destroyed.
  • Financial records: Retained for 6 years as required by HMRC.

7. Data Sharing

I do not share your personal data with any third parties except in the following limited circumstances:

  • Safeguarding: If there is a serious risk of harm to you or another person, I may be required to share relevant information with appropriate authorities.
  • Legal requirement: If required by law or court order.
  • Clinical supervision: I discuss my work in clinical supervision, but your identity is anonymised. No identifiable information is shared.
  • Professional body: In the event of a complaint to the BACP, relevant records may need to be disclosed.

8. International Transfers

Your data is stored and processed within the United Kingdom. I do not transfer personal data outside the UK or the European Economic Area (EEA). If this changes in future, I will ensure appropriate safeguards are in place in accordance with UK GDPR Chapter V.

9. Your Rights

Under UK GDPR, you have the following rights regarding your personal data:

  • Right of access: Request a copy of the personal data I hold about you.
  • Right to rectification: Request correction of any inaccurate or incomplete data.
  • Right to erasure: Request deletion of your data (subject to legal and professional retention requirements).
  • Right to restrict processing: Request that I limit how I use your data.
  • Right to data portability: Request a copy of your data in a structured, machine-readable format.
  • Right to object: Object to the processing of your data in certain circumstances.
  • Right to withdraw consent: Where processing is based on consent, you can withdraw it at any time without affecting the lawfulness of processing carried out before withdrawal.

To exercise any of these rights, please contact me at hello@counsellingwithlana.co.uk. I will respond within one month.

10. Complaints

If you are not satisfied with how I have handled your personal data, you have the right to lodge a complaint with the Information Commissioner's Office (ICO):

11. Changes to This Policy

I may update this policy from time to time. Any changes will be posted on this page with the updated date. I encourage you to review this page periodically.

12. Contact

If you have any questions about this Privacy Policy or how your data is handled, please contact me:

Email: hello@counsellingwithlana.co.uk
Website: counsellingwithlana.co.uk