DISCLAIMER AND PRIVACY NOTICE

Disclaimer

I make every reasonable effort to ensure that the information on this website is accurate and up to date. However, I make no representations, warranties or guarantees, whether express or implied, that the content is accurate, complete or current.

The information provided on this website is for general information purposes only and should not be regarded as counselling, therapeutic, medical, legal or other professional advice. Reliance on any information provided on this website is entirely at your own risk.

To the fullest extent permitted by law, I exclude all liability for any loss or damage arising from the use of, or reliance upon, information contained on this website, including indirect or consequential loss. Nothing in this disclaimer excludes or limits liability where such exclusion would be unlawful.

This website may contain links to third-party websites. These links are provided for convenience only. I have no control over and accept no responsibility for the content, privacy practices or availability of third-party websites.

Privacy Notice

Your privacy is important to me. I am committed to protecting your personal information and handling it lawfully, fairly and transparently.

For the purposes of UK data protection law, I, Nishma Shah, trading as At Your Pace Counselling, am the Data Controller responsible for your personal information.

I process personal data in accordance with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018 and, where applicable, the Privacy and Electronic Communications Regulations (PECR).

I am registered with the Information Commissioner's Office (ICO) under registration number ZB388885.

This Privacy Notice explains:

• What personal information I collect and why
• The lawful basis for processing your information
• How long I keep your information
• Who I may share it with
• Whether information is transferred outside the UK
• How I keep your information secure
• Your rights under data protection law
• How to make a complaint

If you have any questions about this Privacy Notice, please contact me at:

Email: nishma@atyourpacecounselling.com

The Information I Collect

Depending on the nature of our contact, I may collect:

• Your name, address and date of birth
• Telephone number and email address
• Emergency contact details
• GP details and relevant healthcare information
• Information relating to your wellbeing and reasons for seeking counselling
• Session notes and records
• Correspondence by email, text message or other agreed communication methods
• Payment and invoicing information

I only collect information that is relevant and necessary to provide counselling services safely and effectively.

My Lawful Basis for Processing Your Information

If you contact me to enquire about counselling or engage in counselling services, I process your personal information under Article 6(1)(b) UK GDPR because it is necessary for the performance of a contract or to take steps at your request before entering into a contract.

Information relating to your mental and emotional health is considered special category data. I process this information under Article 9(2)(h) UK GDPR, which permits processing necessary for the provision of health or social care, and where necessary under Article 9(2)(f) UK GDPR for the establishment, exercise or defence of legal claims.

Where I retain records following the end of counselling, I may rely on Article 6(1)(f) UK GDPR (legitimate interests), including professional, insurance, safeguarding and legal requirements.

Initial Contact

When you contact me with an enquiry, I will collect information necessary to respond to your request. This may include your name, contact details, preferred location for therapy and any information you choose to share.

You may also be referred by a healthcare professional or contact may be made on your behalf by a parent, guardian or trusted individual.

If counselling does not proceed, I will securely delete your information within six months unless there is a legal reason to retain it.

If you join a waiting list, I will retain your contact details for the purpose of contacting you when a suitable appointment becomes available. You may ask to be removed from the waiting list at any time.

During Counselling

All counselling sessions are confidential.

As part of my professional obligations, I attend clinical supervision. Information discussed in supervision is anonymised wherever possible and supervisors are subject to equivalent professional and confidentiality requirements.

Confidentiality may only be breached where:

• You provide your consent
• There is a serious risk of harm to you or another person
• There are safeguarding concerns relating to a child or vulnerable adult
• I am required by law or court order to disclose information
• Disclosure is necessary to prevent serious crime or comply with statutory obligations

Where appropriate and safe to do so, I will endeavour to discuss any disclosure with you beforehand.

I maintain brief factual records of our work together. These are stored securely using password-protected and encrypted systems where appropriate.

Online Counselling and Electronic Communications

Where counselling is provided online, I use secure platforms designed for professional communication.

While every effort is made to ensure security, no electronic communication system can be guaranteed to be completely secure. By communicating with me via email, text message or online platforms, you acknowledge the inherent risks associated with electronic communication.

Please avoid sending highly sensitive information by email unless necessary.

Third-Party Service Providers

I may use trusted third-party providers to support my practice, such as:

• Email and cloud storage providers
• Website hosting providers
• Online counselling platforms
• Appointment scheduling systems
• Payment processing providers

Where third parties process personal data on my behalf, appropriate contractual and security safeguards are in place.

I do not sell or share your personal information for marketing purposes.

International Data Transfers

Some of the third-party services I use may store or process data outside the United Kingdom.

Where personal data is transferred internationally, I ensure that appropriate safeguards are in place in accordance with UK GDPR requirements, including adequacy regulations, international data transfer agreements or equivalent protective measures.

Retention of Records

Counselling records, contact information and related correspondence are retained for five years following the end of our therapeutic relationship, after which they are securely deleted or destroyed.

This retention period is based on professional, insurance and legal considerations.

Requests for deletion will be considered on a case-by-case basis. However, I may be required to retain certain information to comply with legal, safeguarding, regulatory, professional or insurance obligations, or for the establishment, exercise or defence of legal claims.

Website Cookies and Analytics

My website may use cookies and similar technologies to improve functionality, monitor website performance and enhance user experience.

Where required by law, you will be given the opportunity to accept or reject non-essential cookies.

Any analytics information collected is used in an aggregated form and is not intended to identify individual visitors.

Data Security

I take the security of your personal information seriously.

Measures include:

• Password-protected devices and accounts
• Encryption where appropriate
• Secure storage systems
• Restricted access to records
• Regular review of security practices

While I take reasonable steps to protect your information, no method of electronic storage or transmission can be guaranteed to be completely secure.

Data Breaches

In the unlikely event of a personal data breach that is likely to result in a risk to your rights and freedoms, I will comply with my legal obligations under UK GDPR, including notifying the ICO and affected individuals where required.

Your Rights

Under UK GDPR, you have rights relating to your personal information, including:

• The right to access your personal information
• The right to correct inaccurate information
• The right to request erasure in certain circumstances
• The right to restrict processing
• The right to object to processing
• The right to data portability where applicable
• Rights relating to automated decision-making

I do not use automated decision-making or profiling.

To exercise any of your rights, please contact me at nishma@atyourpacecounselling.com.

I may ask for proof of identity before responding.

I will respond without undue delay and within one month of receiving your request. If your request is particularly complex, I may extend this period by up to a further two months and will inform you if this is necessary.

Complaints

If you have any concerns about how I handle your personal information, please contact me in the first instance so that I can try to resolve the matter.

If you remain dissatisfied, you have the right to lodge a complaint with the Information Commissioner's Office (ICO), the UK's independent authority for data protection.

Further information is available at: ico.org.uk/make-a-complaint

Changes to this Privacy Notice

This Privacy Notice may be updated from time to time to reflect changes in legal requirements, professional guidance or working practices. The most recent version will always be available on this website.