top of page

Privacy Notice

Last updated: 14th September 2026

​

This Privacy Notice explains how Louise Molloy Therapy collects, uses, stores, and protects personal information. I am committed to keeping your data safe, confidential, and used only in ways that support your therapy.

​

I am registered with the Information Commissioner’s Office (ICO) as a data controller. ICO Registration Number: ZB202796

​

1. Who I Am

Louise Molloy Therapy Counsellor and BACP-registered practitioner Email: louisemolloytherapy@protonmail.com 

Website: www.louisemolloytherapy.co.uk

​

2. The Types of Data I Collect

Information you provide:

  • Name and contact details

  • GP details (optional but recommended in case of emergency)

  • Emergency contact

  • Information shared through my website contact form

  • Brief therapy notes

  • Emails or messages you send me

  • Information relevant to your wellbeing, history, or presenting issues

 

Special category data:

As part of therapy, I process health-related information. This is protected under UK GDPR and handled with extra care.

​

3. Lawful Bases for Processing Your Data

I rely on the following lawful bases:

  • Article 6(1)(b) – Contract

  • Article 9(2)(h) – Provision of health care

  • Article 6(1)(c) – Legal obligation

  • Article 6(1)(f) – Legitimate interests

 

4. How Your Data Is Used

Your data is used to:

  • Provide counselling sessions

  • Keep appropriate therapy notes

  • Communicate with you between sessions

  • Maintain safety and safeguarding

  • Manage appointments and administration

  • Reflect on my work in supervision (anonymised)

 

I do not use your data for marketing or analytics.

​

5. How Your Data Is Stored and Protected

Your information is protected through:

  • Encrypted devices

  • Strong passwords and two-factor authentication

  • Secure email provider (ProtonMail)

  • Locked storage for laptop

  • Limited access (only myself, plus clinical executor if needed)

 

I do not store therapy notes in the cloud.

​

6. How Long I Keep Your Data

  • Adults: therapy records are kept for 6 years after therapy ends

  • Children and young people: records are kept until age 25

  • Contact form enquiries: deleted within 3 months if no therapy begins

  • Emails: kept for up to 12 months unless needed for clinical record-keeping

 

After the retention period, data is securely deleted or shredded.

​

7. Sharing Your Data

I keep your information confidential. I only share data when:

  • You give explicit consent

  • There is a risk of serious harm

  • I am legally required to

  • Discussing work in supervision (anonymised)

  • My clinical executor needs to contact clients if I am unable to practise

 

I do not share your data with advertisers, analytics companies, or social media platforms.

​

8. Your Rights

Under UK GDPR, you have the right to:

  • Access your data

  • Request corrections

  • Request deletion (in some circumstances)

  • Restrict processing

  • Object to processing

  • Request a copy of your data in a portable format

 

You can make a request by emailing me at louisemolloytherapy@protonmail.com. I will respond within one month.

​

9. Website Contact Form

If you use my contact form, I collect:

  • Your name

  • Your email address

  • Any information you choose to include

 

This information is used only to respond to your enquiry. It is not used for marketing or shared with third parties.

​

10. Concerns or Complaints

If you have concerns about how your data is handled, please contact me. If you are not satisfied, you can contact the ICO:

Information Commissioner’s Office (ICO) www.ico.org.uk  or telephone: 0303 123 1113

bottom of page