Privacy Policy
Privacy Policy and Code of Ethics
Let’s Resolve It Therapy is committed to protecting your privacy and handling your personal information in a safe, secure, transparent and lawful way in accordance with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018 and the Data (Use & Access) Act 2025 (as in force from 19/6/26)
This Privacy Policy explains how your personal information is collected, used, stored and protected.
Code of Ethics
I am a registered member of the National Counselling and Psychotherapy Society (NCPS) and work in accordance with their Code of Ethical Practice.
Details of the NCPS Code of Ethics can be found on the NCPS website.
Information I Collect
To provide counselling services, I may collect and process personal information, including the following:
Your name, address, telephone number and email address
Emergency contact details where appropriate
Relevant health and wellbeing information shared during counselling
Session notes relating to the therapeutic work undertaken
Appointment and payment records
Information submitted through website contact forms
I only collect information that is necessary to provide counselling services safely and effectively.
Lawful Basis for Processing
Under UK GDPR, I rely on the following lawful bases for processing your personal data:
Contractual obligation – to provide counselling services agreed with you
Legal obligation – to comply with professional, legal and insurance requirements
Legitimate interests – for the safe and effective delivery of therapy services
Explicit consent – for processing special category data (such as health information)
You have the right to withdraw consent at any time where consent is relied upon.
How Your Information Is Used
Your personal information is used for:
Arranging and managing appointments
Providing counselling services
Maintaining clinical records
Meeting professional, ethical and legal obligations
Communicating with you regarding your therapy
Your information will never be sold or shared for marketing purposes.
Data Sharing
Your information is kept strictly confidential and will not be shared with third parties unless:
You have given your explicit consent
It is required for supervision (where anonymised wherever possible)
It is required by law or safeguarding duty
Data Storage and Security
I take appropriate technical and organisational measures to protect your personal data.
Electronic records are stored on password-protected devices and secure systems
Paper records are stored securely with restricted access
Access is limited to the Data Controller only
Data Retention
Your information is retained only for as long as necessary to meet legal, professional and insurance requirements.
Typically, counselling records are retained for:
Adult clients: 7 years after the end of therapy
Children/young people: until age 25 (or 26 if therapy ended at age 17)
After this period, records are securely destroyed.
Confidentiality and Legal Exceptions
Everything discussed during counselling is treated as confidential.
However, confidentiality may be broken where:
There is a serious risk of harm to yourself or others
There are safeguarding concerns involving a child or vulnerable adult
Information relating to terrorism or serious crime is disclosed
Records are required by a court of law or legal obligation
Where possible, this will be discussed with you first.
Your Rights
Under UK GDPR, you have the following rights:
Right of Access – request a copy of your data
Right to Rectification – correct inaccurate data
Right to Erasure – request deletion in certain circumstances
Right to Restrict Processing
Right to Data Portability
Right to Object to processing
Requests can be made using the contact details below.
Data Controller
For the purposes of UK data protection legislation, the Data Controller is:
Lisa Tabanivesikula
Let’s Resolve It Therapy
Email: letsresolveittherapy@gmail.com
Data Protection Complaints
You have the right to raise concerns directly with me about how your personal data is handled.
You can submit a data protection complaint by:
Via the website contact form
Or by any other reasonable method of communication
When a complaint is received:
I will acknowledge receipt within 30 days
I will investigate your concern fairly and appropriately
I will take reasonable steps to resolve the issue
I will keep you informed where necessary
I will provide a clear outcome without undue delay
You are encouraged to contact me first so that I can attempt to resolve your concern.
If you are not satisfied with the outcome, you have the right to escalate your complaint to:
Information Commissioner’s Office (ICO)
Website: https://www.ico.org.uk
Helpline: 0303 123 1113
NCPS
Website: https://ncps.com
Cookies
This website uses cookies to ensure the website functions properly and to analyse usage. Where required, you will be asked to consent to non-essential cookies via a cookie banner. You can manage or disable cookies through your browser settings.
International Data Transfers
Your personal data is stored within the UK. If any data is transferred outside the UK, appropriate safeguards will be applied in accordance with UK GDPR.
Children’s Data
Where counselling services are provided to individuals under 18, appropriate parental or guardian consent will be obtained where required.
Policy Review
This Privacy Policy is reviewed regularly and may be updated to reflect changes in legislation or practice.