Privacy Policy Mindbody Counselling | Paul Weeden
Who We Are
Paul Weeden, BACP-registered integrative therapist, trading as Mindbody Counselling. Practice locations: Seaford and Hove, East Sussex. Email: [contact@mindbodycounselling.co.uk | Tel: [+44(0)7900822973]. Paul Weeden is the data controller for all personal data collected through this website and practice.
Data We Collect
When you make an enquiry or begin therapy, we may collect: your name, contact details (email, phone, address), GP details, next of kin, payment information, and clinical session notes. If you visit this website, standard data such as your IP address and cookies may be collected automatically (see Cookies below).
Why We Collect It & Lawful Basis
Your data is collected and processed for the purpose of providing counselling services. The lawful basis is: contractual necessity (during active therapy), legitimate interest (after therapy ends, for record-keeping), and legal obligation (e.g. safeguarding duties). Health and session data is special category data, processed under Article 9 as necessary for the provision of health treatment.
How Long We Keep It
Client records are retained for 6 years after the end of therapy, in line with Common Law requirements. If you were a minor when therapy began, records are kept until you turn 21 (3 years after age 18). After this period, records are securely deleted.
Who We Share Data With
Your data is not sold or shared for marketing purposes. It may be shared with: your clinical supervisor (anonymised notes only), your GP or emergency services where there is a serious risk to life, or as required by law (e.g. safeguarding obligations). Third-party tools used in this practice (e.g. booking or payment systems) are bound by their own GDPR-compliant policies.
Cookies
This website uses cookies to help it function and to analyse traffic (e.g. via Google Analytics). You can control cookies through your browser settings. By continuing to use this site, you consent to our use of cookies. A full cookie policy is available on request.
Data Security
All electronic records are password-protected and encrypted. Paper notes are stored securely. In the unlikely event of a data breach, you will be notified as required by UK GDPR, and the ICO will be informed within 72 hours if required.
Your Rights
Under UK GDPR, you have the right to: access the data held about you, correct inaccurate data, request erasure (subject to legal retention obligations), restrict or object to processing, and data portability. To exercise any of these rights, contact Paul Weeden using the details above. You also have the right to complain to the Information Commissioner's Office: ico.org.uk | 0303 123 1113.