Privacy Notice

Privacy Notice

Time To Talk Counselling

Last updated: 22 June 2026

This privacy notice explains how I collect, use, store and protect personal information in my counselling practice.

I am Victoria Bates, a Psychotherapeutic Integrative Counsellor trading as Time To Talk Counselling. I provide counselling and psychotherapy services in person and online.

I am the data controller for the personal information I collect through Time To Talk Counselling.

 

Contact Details

Time To Talk Counselling

Email: therapy@timetotalkcounselling.com

Phone: 07767 534438

Website: https://timetotalkcounselling.com

ICO Registration Number: ZB866829

If you have any questions about this privacy notice or how your information is handled, please contact me using the details above.


 

Information I Collect

When you contact me, I may collect:

  • Your name
  • Email address
  • Telephone number
  • Information you choose to share in your enquiry
  • Appointment preferences and availability

If we begin working together, I may also collect:

  • Postal address
  • Date of birth
  • Emergency contact details
  • GP details where appropriate
  • Relevant health and wellbeing information
  • Information about your personal circumstances, relationships, family, employment and life experiences
  • Session notes
  • Appointment and payment records
  • Correspondence between us

Some of this information may constitute special category data under UK GDPR, including information relating to health, mental health, sexuality, ethnicity, religious beliefs or other sensitive matters relevant to therapy.

I only collect information that is necessary to provide therapy safely, ethically and professionally.


 

How I Use Your Information

I use personal information to:

  • Respond to enquiries
  • Arrange consultations and appointments
  • Provide counselling and psychotherapy services
  • Maintain appropriate clinical records
  • Manage appointments and payments
  • Communicate with you regarding sessions
  • Meet professional, legal and ethical obligations
  • Manage safeguarding concerns and risk situations where necessary
  • Handle complaints and data protection requests
  • Maintain business, insurance and accounting records

I do not sell or share personal information for marketing purposes.


 

Lawful Basis for Processing

Under UK GDPR, I rely on one or more lawful bases for processing personal information.

Contract

Where processing is necessary to arrange or provide counselling services.

Legitimate Interests

Where processing is necessary to operate my practice safely and effectively, maintain records, respond to enquiries and protect clients and myself.

Legal Obligation

Where I am legally required to retain or disclose information.

Special Category Data

Where I process information relating to health or mental health, I rely on the appropriate conditions under Article 9 UK GDPR and the Data Protection Act 2018 to provide health-related therapeutic services.


 

Confidentiality

Counselling is confidential; however, confidentiality is not absolute.

Information will not normally be shared without your knowledge unless:

  • There is a serious risk of harm to yourself or another person.
  • There are safeguarding concerns involving a child or vulnerable adult.
  • Disclosure is required by law or court order.
  • Disclosure is necessary to prevent or detect a serious crime.
  • A medical emergency requires information to be shared to protect life.
  • Professional consultation with a clinical supervisor is required.

Where possible, I will discuss any necessary disclosure with you beforehand unless doing so would increase risk or prevent appropriate safeguarding action.


 

Clinical Supervision

As part of ethical practice, I engage in regular professional supervision.

Client work may be discussed with my clinical supervisor to support safe and effective practice. Wherever possible, identifying details are minimised.

My supervisor is bound by professional confidentiality requirements.


 

Clinical Notes and Records

I maintain brief clinical records to support safe and ethical practice.

These records may include:

  • Session dates
  • Attendance information
  • Brief themes discussed
  • Risk and safeguarding information
  • Agreed actions and decisions
  • Administrative and contact information

I do not keep verbatim transcripts of therapy sessions.


 

How Long Information Is Kept

I only keep information for as long as necessary.

As a general guide:

  • Enquiry information that does not result in therapy will usually be deleted within 12 months.
  • Client records are securely stored and retained for 3 months after therapy ends, after which they are securely destroyed.
  • Financial records are retained in accordance with HMRC requirements.
  • Administrative communications are reviewed and deleted when no longer required.

Longer retention periods may apply where safeguarding, legal, insurance or professional obligations require this.


 

Where Information Is Stored

Your information may be stored using:

  • Website and contact forms associated with Time To Talk Counselling
  • Microsoft Outlook email
  • Secure password-protected devices
  • Zoom and Microsoft Teams for online counselling sessions
  • Bank transfer payment records
  • Secure cloud storage and backups where necessary

Appropriate technical and organisational measures are used to protect information, including:

  • Password protection
  • Device security
  • Restricted access
  • Secure storage
  • Two-factor authentication where available



Online Therapy

Where sessions take place online, they will normally be conducted using Zoom or Microsoft Teams.

Reasonable steps are taken to maintain confidentiality and security.

These platforms may collect technical information such as IP addresses, device information and connection data. Clients should also review the privacy information provided by the platform used for their sessions.


 

AI, Recording and Transcription

I do not record therapy sessions.

I do not use AI tools or transcription services to process therapy sessions.

General administrative digital tools may be used to support the running of the practice. Identifiable client information is not entered into public AI systems.


 

Website Visitors and Cookies

When you visit this website, technical information may be collected automatically, including:

  • IP address
  • Browser type
  • Device information
  • Pages visited
  • Date and time of visits

Cookies may be used to:

  • Ensure website functionality
  • Improve performance
  • Enhance security
  • Understand website usage

Where legally required, consent options will be provided for non-essential cookies.

You can control cookies through your browser settings.


 

Sharing Information

Information will only be shared where necessary, proportionate and lawful.

This may include:

  • Clinical supervisors
  • Accountants, insurers or legal advisers
  • Professional membership bodies
  • Emergency services
  • Safeguarding authorities
  • GPs where appropriate
  • Courts or legal authorities where legally required
  • Trusted service providers processing information on my behalf

Where information is transferred outside the UK, appropriate safeguards will be in place where required.


 

Clinical Will

I am currently in the process of establishing formal clinical will arrangements to ensure clients can be contacted appropriately if I become seriously ill, incapacitated or die.

Until these arrangements are in place, client information remains securely protected and confidential. Once formal arrangements have been established, this privacy notice will be updated accordingly.


 

Your Rights

Under UK data protection law, you have the right to:

  • Be informed about how your data is used.
  • Access personal information held about you.
  • Request correction of inaccurate information.
  • Request deletion of information in certain circumstances.
  • Restrict or object to certain processing.
  • Make a complaint regarding how your information has been handled.

Requests can be made using the contact details provided above.

I will normally respond within one month.


 

Data Protection Concerns and Complaints

If you have concerns about how your personal information has been handled, please contact me directly.

Please include:

  • Your name
  • Details of your concern
  • Any relevant dates or information
  • How you would like me to respond
 

I will acknowledge your complaint within 30 days and investigate it without undue delay.

If you remain dissatisfied, you can contact:

Information Commissioner’s Office (ICO)

Website: https://www.ico.org.uk

Telephone: 0303 123 1113


 

Changes to this Privacy Notice

This privacy notice may be updated from time to time to reflect changes in legal requirements, professional guidance or the systems used within the practice.

The latest version will always be available on this website.

Skip to content