Last updated: May 2025

I am committed to protecting and respecting your privacy. This policy explains how I collect, use, store, and protect your personal data in compliance with the UK General Data Protection Regulation (GDPR) and other relevant laws.

By engaging with my services, you agree to the practices described in this policy. If you have any questions, please contact me at abbyrosstherapy@gmail.com.

Who I am

I am a Child and Adolescent Psychotherapist operating as a sole trader under Abby Ross Therapy. I provide psychotherapy services in-person and occasionally via Zoom for remote sessions.

I am registered with the Information Commissioner’s Office (ICO) under reference number _______

Information I collect

I may collect and process the following personal data:

• Contact details (e.g. name, email, phone number, address)

• Demographic information (e.g. age, gender)

• Clinical notes from sessions (anonymised and GDPR-compliant)

• Payment information (e.g. bank details for invoicing)

• Emergency contact details (if provided)

How I use your information

Your data is used for:

• Providing therapy services and managing appointments

• Processing payments

• Complying with legal and professional obligations

• Ensuring safety in emergencies

Note on bank statements:

If you pay for sessions via bank transfer, your payment reference may appear on statements. This could be visible to third parties (e.g. mortgage providers), but no clinical details are disclosed.

Confidentiality and data security

• Session notes are anonymised and stored securely (electronically with password protection or in locked physical files)

• Zoom sessions are conducted with encryption

• Emails/texts are kept secure, but electronic communication carries inherent risks - please avoid sharing sensitive details this way

Data sharing and third parties

I will never share your personal data without consent unless legally required (e.g. safeguarding concerns, court orders).

Limited exceptions:

• Supervision: I discuss cases anonymously with my clinical supervisor

• Payment processors: Your bank details are shared only for transaction purposes

Website and cookies

If you visit my website, it may use cookies for analytics (e.g. Google Analytics). You can disable cookies in your browser settings.

Your rights under GDPR

You have the right to:

• Request access to your personal data

• Correct inaccurate information

• Request deletion of data (where legally permissible)

• Withdraw consent (where applicable)

To exercise these rights, contact me at abbyrosstherapy@gmail.com

Data retention

I retain clinical records for 7 years (or until a child turns 25, per NHS guidelines) before secure deletion. Contact details are deleted after sessions end unless needed for legal reasons.

Changes to this policy

I may update this policy occasionally. The latest version will always be on my website or provided upon request.

Contact me

For privacy-related questions, email abbyrosstherapy@gmail.com

If unsatisfied with my response, you can contact the ICO (www.ico.org.uk)