Skip to content
Contact

Privacy Notice

Last updated: 30.01.2026

1. Introduction

I am Kitty Stephenson (K. Stephenson Counselling), a counsellor based in the UK and a registered member of the British Association for Counselling and Psychotherapy (BACP). I am responsible for how personal data on this website is collected and used.

This privacy policy explains how personal information is collected, used, and protected when you visit this website or contact me. I am committed to protecting your privacy and handling your personal information with care, in accordance with the BACP Ethical Framework (see BACP Ethical Framework for the Counselling Professions), UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018 and the Privacy and Electronic Communications (EC Directive) Regulations 2003.

‘Data controller’ is the term used to describe the person/organisation that collects and stores and has responsibility for people's personal data. In this instance, the data controller is me, Kitty Stephenson.

I am registered with the Information Commissioner's Office (ICO).

Contact Details:

  • Email: hello@kstephenson-counselling.co.uk
  • Website: www.kstephenson-counselling.co.uk

2. Lawful Basis for Holding and Using Your Personal Information

The GDPR states that I must have a lawful basis for processing your personal data. There are different lawful bases depending on the stage at which I am processing your data:

  • Current or Prospective Clients: I will process your personal data where it is necessary for the performance of our therapeutic agreement.
  • Ended Therapy: I will use legitimate interest as my lawful basis for holding and using your personal information.
  • Special Category Data: The lawful basis for me processing any special categories of personal information is that it is for provision of health treatment (in this case counselling) and necessary for a contract with a health professional (in this case, a contract between me and you). 
  • Website Visitors: I use legitimate interests as my lawful basis for holding and using anonymous internet log information e.g. page visits, when you visit my website.

3. How I Use Your Information

Initial contact

When you contact me with an enquiry, I will collect information to help me satisfy your enquiry. This includes your name, email address, phone number, and any information included in the ‘How can I help?’ message field. If you decide not to proceed, I will ensure all your personal data is deleted within six months.

Contact form submissions are processed and stored securely using HubSpot, a third-party website platform.

While you are accessing counselling

Information disclosed during the course of counselling is kept confidential except in particular circumstances where:

  • If I have concerns that the client is at risk of harm to themselves, to someone else, or from someone else.
  • If I have a legal obligation to report behaviour such as terrorism, drug dealing, or money laundering.
  • If a child or vulnerable adult is at risk.

I will always try to speak to you about this first, unless there are safeguarding issues that prevent this.

I keep a record of your personal details during the counselling process. These details are kept securely on encrypted devices and are not shared with any third party. I will keep written and digitalised notes of each session, which are kept securely and separately from your identifying information.

After counselling has ended

Once counselling has ended, your records will be kept for 7 years in accordance with professional standards and insurance requirements, after which they are then securely destroyed.

4. Use of Third-Party Services

This website makes use of third-party tools, such as the website platform and analytics services, to help the site function and to understand general website usage. These providers have their own privacy policies, which explain how they collect and use information.

These services process data in line with their own privacy policies and applicable data protection laws (including UK GDPR)

You can read more about their privacy practices here:

-HubSpot:
https://legal.hubspot.com/privacy-policy 

Google Analytics (Google): 
https://policies.google.com/privacy 

5. Your Rights

Under the GDPR, you have the following rights:

  • Access: You have a right to ask for a copy of your personal information that I hold, either in electronic or paper format.
  • Erasure: You have a right to ask me to delete your personal information.
  • Correction: You have the right to request that I change/correct any mistakes in your personal information.
  • Objection: You have the right to object to the use of your personal data in some circumstances. You can read more about your rights at ico.org.uk/your-data-matters.

To make a request for your personal information, please put the request in writing to hello@kstephenson-counselling.co.uk.

If you have any complaint about how I handle your personal data please do not hesitate to get in touch with me by writing or emailing to the contact details given above. I would welcome any suggestions for improving my data protection procedures.

If you want to make a formal complaint about the way I have processed your personal information you can contact the ICO which is the statutory body that oversees data protection law in the UK. For more information go to ico.org.uk/make-a-complaint.

6. Data Security

I take the security of the data I hold about you very seriously and take every effort to make sure it is kept secure. I use encrypted devices with multi-factor authentication methods and password-protected systems to provide adequate safety for your data. 

7. Website Visitors and Cookies

When someone visits my website, I use third-party services (Google Analytics and HubSpot) to collect standard internet log information and details of visitor behaviour patterns. I do this to find out things such as the number of visitors to the various parts of the site. This information is only processed in a way that does not identify anyone. No personally identifying information is collected unless you submit the contact form. Analytics data may be collected in a pseudonymised form (for example, via cookies or unique visitor identifiers).

Cookies help the site function and collect anonymous analytics data; you can manage or disable cookies in your browser settings.

Like most websites, cookies are used to help the site work more efficiently. You can manage or disable cookies through your browser settings.

8. Changes to this policy

This privacy policy may be updated from time to time. The most recent version will always be available on this website.

A final note

If you have any questions about this policy or how your information is handled, you are welcome to contact me. Protecting your privacy and dignity is an important part of my professional and ethical responsibilities.

 

Location: United Kingdom