top of page

elysia counselling services
privacy policy

INTRODUCTION

 

Your privacy is very important to me, and you can be confident that your personal information will be kept safe, secure, and only used for the purpose you provide it. I adhere to current data protection legislation, including the General Data Protection Regulation (EU 2016/679) (the GDPR), the Data Protection Act 2018, and the Privacy and Electronic Communications (EC Directive) Regulations 2003. This privacy notice explains how I handle your personal information from first contact through to after your therapy has ended, including:

 

  • Why I process your information and the purposes for doing so

  • Whether you have to provide it

  • How long I store it

  • Who may receive your personal information

  • Whether I transfer it internationally

  • Whether I carry out automated decision-making or profiling

  • Your data protection rights

 

I am happy to answer any questions about my data protection practices. You can contact me via email. I am the data controller, registered with the Information Commissioner’s Office (registration number: ZB716531). My phone number is 07881 570314 and my email is elizabeth@elysiacounsellingservices.com.

​

​

MY LAWFUL BASIS FOR HOLDING AND USING YOUR PERSONAL INFORMATION

 

The GDPR states I must have a lawful basis for processing your personal data, which varies depending on the stage of our relationship:

 

  • If you have had therapy with me and it has ended, I use legitimate interests as the lawful basis for holding and using your personal information.

  • If you are currently in therapy or considering therapy, I process your data as necessary to perform our contract.

  • For any sensitive personal information (‘special category data’) you disclose, I initially rely on your consent. I retain counselling records to comply with legal requirements, such as defending potential legal claims.

 

 

HOW I USE YOUR INFORMATION

 

Initial Contact

When you contact me about counselling services, I collect information such as your name, contact details, and the context of your enquiry. This may also come via a referral or a trusted person acting on your behalf. If you decide not to proceed, I delete this data within six months unless you ask for earlier deletion.

 

While you are Accessing Counselling

Everything you discuss with me is confidential. Confidentiality will only be broken if there is a serious risk of harm to yourself or others, or if required by law. I will always try to discuss this with you first unless there are safeguarding concerns.

 

I keep records of your personal details and session notes securely. These are not shared with any third party. For security, I do not retain WhatsApp messages for more than six months; relevant information from messages is recorded in session notes. Non-important emails are deleted after six months.

After Counselling has Ended

Your records are kept securely for six years after our contact ends, then securely destroyed.

​

 

YOUR RIGHTS

 

You have rights to access, correct, limit, or delete your personal data. You can also object to how I use it in some cases. For full details, visit ico.org.uk/your-data-matters.

 

If I hold information about you, I will provide:

  • A description of the data and its source

  • Why I hold it, how long it will be stored, and the basis for these decisions

  • Who it may be shared with

  • A copy of the information in an understandable form

 

To make a request or correct data, please email elizabeth@elysiacounsellingservices.com. For complaints, contact me or the Information Commissioner’s Office at ico.org.uk/make-a-complaint.

​

 

DATA SECURITY

 

I take data security seriously. Client records and session notes are stored securely on a password-protected electronic notebook and laptop used only by me. WhatsApp communication is limited to scheduling and brief updates and follows best practices for confidentiality. Devices are regularly updated with security patches, encryption, and strong passwords to prevent unauthorized access.

 

 

VISITORS TO MY WEBSITE

 

When you visit my website, third-party services collect standard internet log data and visitor behaviour patterns to help improve the site. This data does not identify you personally.

 

I use Google Analytics to better understand how visitors interact with the website - such as which pages are visited, how long users stay, and how they found the site. This helps me improve the site’s content and functionality. Google Analytics collects data via cookies and similar technologies, but this information is anonymised and does not identify individuals.

 

I do not, and will not, try to find out who visits the site. I rely on legitimate interests as my lawful basis for collecting and using this data.

 

The website is built and hosted on Wix.com, which may also collect data needed for basic site functionality. You can read Wix’s privacy policy here: https://www.wix.com/about/privacy.

 

To learn more about how Google collects and processes data, you can visit: https://policies.google.com/technologies/partner-sites

 

Contact Form

If you fill in a form on my website, the information you provide (such as your name, email address, or message) will be sent to me via secure email and may be temporarily stored by Wix during transmission. This information is used solely to respond to your enquiry and is not shared with other third parties.

 

I do not collect personal data unless you voluntarily provide it through a contact form or direct communication.

 

Cookies

My website uses cookies (small files stored on your device) to help the site function properly and improve your browsing experience. These may collect non-identifying information such as page visits or preferences.

 

You can control or disable cookies through your browser settings at any time. For more information, see Wix’s cookie policy here: https://support.wix.com/en/article/cookies-and-your-wix-site.

​

 

DATA TRANSFERS

 

I only use third-party service providers (such as Wix and Google Analytics) who are committed to GDPR compliance and have implemented appropriate safeguards to protect your personal data when it is transferred outside the UK or European Economic Area. These safeguards include legal agreements like Standard Contractual Clauses to ensure your information is kept secure and handled responsibly.

​

 

AUTOMATED DECISION-MAKING AND PROFILING

 

I do not use automated decision-making or profiling in the processing of your personal data. All decisions related to your therapy, or your use of this website are made by a human being.

​

 

LAST UPDATED

 

This privacy policy was last updated on 28 May 2025.

​

​

DOWNLAOD A COPY OF MY PRIVACY POLICY

​

You may download a copy of my privacy policy here.

bottom of page