Culturally Informed Counselling in Queen’s Park, Westminster

The General Data Protection Regulation (GDPR) is concerned with the personal information about you that I collect, store, and share. This page outlines how Shifaa Healing Hearts Counselling CIC (SHHC) complies with GDPR requirements.

What Personal Information SHHC Collects:

• Name
• Gender or preferred identity
• Age
• Date of birth
• Relationship status
• Occupation
• Telephone/SMS number
• Counselling history
• Medical conditions relevant to therapy
• Prescribed medication
• Presenting difficulties
• Brief session summaries

How SHHC Stores Your Personal Information

Storage Methods:

Paper- Written notes, including:

• Contact sheet
• Signed contract/agreement
• Assessment record
• Brief session notes
• GDPR agreement
• Client code (used to link anonymised documents)

Electronic-

• Contact details and email correspondence stored in my Gmail account
• SMS or WhatsApp messages stored on my phone
• The website does not store personal information, but may collect and send it to my Gmail account during initial contact.

How SHHC Processes and Shares Your Information

Confidentiality

All information shared in therapy is treated as confidential. There are some exceptions where information may need to be shared:

Emergencies:

If I believe you are at risk of serious harm, and with your consent, I may contact appropriate emergency services.

If there is disclosure of serious intent to harm others or involvement in a serious crime (e.g. terrorism), I may be legally required to report this without your consent or knowledge (whistle-blowing).

Data Retention and Erasure

After we finish working together, I will retain your records (both written and electronic) for up to seven years, in line with ethical and legal requirements. This allows for continuity if you return to therapy. After this time, paper records will be securely shredded, and digital records deleted.

Your Rights Under GDPR

You have the right to:

• Be informed about the data I hold (this document)
• Access the personal data I hold about you (first request is free of charge)
• Correct any inaccurate or incomplete information
• Withdraw your consent at any time
• Request that your personal data be erased (unless I am legally required to retain it to practise safely and lawfully)

This privacy statement is reviewed periodically to ensure it remains accurate and up to date.

Last updated: 25th March 2025