In my role as a psychotherapist, I am required by law to follow and adhere to rules regarding data collection, utilisation and storage as outlined in General Data Protection Regulation (GDPR) and The Data Collection Act (2018). The collection of your personal data is either based on the ‘Legitimate Interests’ criterion or is obtained through your explicit consent, in line with accepted GDPR standards. My registration as a data handler is recognised by the Information Commissioner’s Office (ICO).

Personal data I collect can include your name, physical address, email and telephone number. If you pay me via electronic means, this information may be stored also. These are stored securely in password protected format. In order to be able to fulfil my duty of care to you, at our initial consultation I will also request details of your GP practice. Data sharing with third parties, such as your GP, would only be undertaken in exceptional circumstances, such as if I were legally required or to safeguard someone's vital interests, including yours. Your telephone number and email address may be kept in my mobile phone which is also password protected. Emails are stored in a password protected email server.

After each session, I take brief notes that are stored in a password protected format using multi-factor authentication. These notes are to keep record of session attendance and content for progress tracking and professional supervision, ensuring confidentiality. It is part of my professional accrediting body (The British Association for Counselling and Psychotherapy) regulations that I regularly consult with another therapist (supervisor) about the work that I undertake with clients, to ensure that my practice remains ethical and effective. Aspects of our work may be discussed during these sessions, but no full name will be used and identifiable details removed. My supervisor is a member of The British Association for Counselling and Psychotherapy and as such they are bound by the same confidentiality rules as myself.

I retain your personal data for the duration of our work together and up to 7 years afterwards, following which it shall be securely deleted. 

Your data rights under GDPR:

• Your right of access - You have the right to ask for copies of your data held by me at no charge. Read more about the right of access.

• Your right to rectification - You have the right to ask me to correct or delete personal information you think is inaccurate or incomplete. Read more about the right to rectification.

• Your right to data portability - You have the right to ask that I transfer the personal information you gave me to another entity. Read more about the right to data portability.

• Your right to be informed about how your data is used – I am happy to discuss any questions surrounding this or about my privacy policy at any time.

To make a data protection rights request or have any queries surrounding this then please contact me via email at harrygrangerhowelltherapy@gmail.com

Website privacy policy

Like many websites, my website uses cookies. A explanation of cookie usage can be found here https://www.counselling-directory.org.uk/cookie-policy.html#thirdpartycookiesweuseThese. In order to improve site performance, it is possible for the site to collect data about the device type, IP address and access time. Your decision to use the website implies your agreement to the data processing activities described in this notice.

Website communication

My website has a contact form to enter your personal details, you do not need to add any further information about yourself, doing so is at your own discretion.

This policy has been updated in September 2026. Any further updates shall be communicated here.