Privacy Policy

Last Updated: 26 July 2026

At Clear Current Counselling, your privacy and confidentiality are of the utmost importance. This policy outlines how your personal data is collected, used, stored, and protected in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

1. Who is collecting your data?

Tiffany Beales, operating as Clear Current Counselling, is the Data Controller for this practice. I am registered with the Information Commissioner's Office (ICO).

My ICO Security Number is: CSN8582481.

2. What data do I collect?

Depending on how you interact with my website and practice, I may collect the following information:

  • Basic Contact Details: Name, email address, phone number, and address (when you fill out a contact form or become a client).
  • Sensitive Data (Special Category Data): Medical history, GP contact details, and brief, anonymised session notes. This is only collected if we enter into a therapeutic agreement.
  • Website Usage Data: Information about how you use this website, your IP address, and browser type. This is collected automatically through cookies and used for website analytics and advertising.

3. Why do I collect this data and what is the lawful basis?

I collect this data to safely and professionally provide counselling services. Under UK GDPR, the lawful bases I rely on are:

  • Legitimate Interest: To respond to your initial enquiries and to understand how visitors use my website (via Squarespace and Google).
  • Contract: To fulfil the counselling agreement we establish when we begin working together.
  • Explicit Consent: For processing special category health data, and for the use of non-essential cookies (like Google Ads tracking).

4. How is your data stored and secured?

Your confidentiality is paramount.

  • Digital Data: Any digital records (such as emails or intake forms) are stored on secure, password-protected devices. My website is built on Squarespace and hosted by Krysalis, both of which employ robust security measures.
  • Paper Records: Any physical notes are anonymised (using a code instead of your name) and kept in a locked filing cabinet.

5. Do I share your data?

I will never sell your personal information. I only share data in the following circumstances:

  • Legal or Ethical Obligation: If I believe there is a risk of serious harm to yourself or others, or if compelled by a court of law, in line with NCPS ethical guidelines.
  • Service Providers: I use third-party platforms to run my business safely and effectively. This includes my website host (Krysalis), website builder (Squarespace), and advertising platforms (Google Ads). These providers process data securely on my behalf.

6. How long do I keep your data?

In accordance with standard counselling insurance requirements, your records and session notes will be kept securely for up to 7 years after our therapeutic work concludes. After this time, all records will be securely destroyed.

7. Your Rights

Under UK GDPR, you have the right to request access to your data, request corrections, or request deletion of your records (subject to my legal and insurance retention requirements).

To make a request, or if you have any questions about this policy, please contact me at: tiffany@clearcurrentcounselling.co.uk