Privacy notice

Last Updated: June 2026

Introduction

I am committed to protecting your privacy and handling your personal information in a transparent and secure manner. This Privacy Notice explains how I collect use, store and protect your personal data in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

Data controller

The Data Controller responsible for your personal data is:
Amy Tunney
Rise Wellbeing
Walsall Road, Four Oaks, Sutton Coldfield B74 4QY
Email: hello@rise-wellbeing.co.uk
Telephone: 07481 806 086

What information I collect

I may collect and process the following information:

Contact information:

• Name
• Address
• Telephone Number
• Email Address
• Emergency Contact Details

Personal information:

• Date of Birth
• GP Details
• Relevant health information
• Information relating to your counselling needs and wellbeing

Session records:

I may keep brief notes relating to counselling sessions, including:

• Date of sessions
• Attendance records
• General themes discussed
• Risk assessment where appropriate

These notes are kept securely and are only accessible to me.

Financial information:

• Payment records
• Invoices and receipts

I do not store full bank card details.

Why I collect your information

I collect and use your personal data for the following purposes:

• Providing counselling services
• Arranging appointments
• Maintaining clinical records
• Managing payments and accounting requirements
• Meeting legal and professional obligations
• Protecting your safety and wellbeing where necessary

Legal basis for processing

Under UK GDPR, I process your information under the following lawful bases:

Contract

Processing is necessary to provide counselling services and maintain our professional relationship.

Legitimate interests

Processing is necessary for the safe and effective operation of the counselling practice.

Legal obligation

Certain records may need to be retained to comply with legal, regulatory, insurance, taxation, or safeguarding requirements.

Special category data

Information about your health and wellbeing is classified as special category data. This is processed for the provision of health and counselling services and with appropriate safeguards in place.

Confidentiality

Confidentiality is a fundamental part of counselling practice.
Information shared during counselling sessions will remain confidential except where:

• You give your consent for information to be shared.
• There is a serious risk of harm to yourself or another person.
• There is a safeguarding concern involving a child or vulnerable adult.
• Disclosure is required by law or court order.
• Professional supervision requires discussion of your case. Any discussion in supervision is conducted confidentially and without identifying information wherever possible.

How your information is stored

I take appropriate measures to protect your personal data. This may include:

• Password protected electronic records
• Encrypted devices where appropriate
• Secure storage or paper records
• Secure email and communication systems

I restrict access to your information to only those who require it for legitimate professional purposes.

How long information is kept

Records are retained in accordance with professional and legal guidance. Typically:

• Adult client records are retained for 7 years after counselling ends.
• Records relating to children and young people may be retained until the Client’s 25th birthday (or longer where legally required).
• Financial records are generally retained for 6 years for tax purposes.

After the retention period, records will be securely destroyed.

Sharing information

Your information will not be sold or shared for marketing purposes.
Information may be shared with:

• Clinical supervisors
• Professional indemnity insurers
• Legal authorities where required by law
• Emergency services or safeguarding agencies where necessary to protect safety

Any sharing will be limited to what is necessary.

Online counselling

Where counselling is provided online, I may use secure video conferencing platforms.

While reasonable security measures are taken, no online communication can be guaranteed to be completely secure.

Clients are encouraged to access sessions from a private location and use secure internet connections.

Your rights

Under UK GDPR, you have the right to:

• Access your personal information
• Request correction of inaccurate information
• Request erasure of information where appropriate
• Restrict processing in certain circumstances
• Object to processing where applicable
• Request transfer of your data where applicable
• Withdraw consent where consent is relied upon

Some rights may be limited by legal, ethical or professional obligations.

Complaints

If you have concerns about how your personal data is handled, please contact me in the first instance.
You also have the right to lodge a complaint with:
Information Commissioner’s Office
Website: ico.org.uk
Telephone: 0303 123 1113

Changes to this privacy notice

This Privacy Notice may be updated from time to time. The latest version will always be available upon request and, where applicable, on my website.

Contact

If you have any questions about this Privacy Notice or how your personal information is handled, please contact:
Amy Tunney
Rise Wellbeing
Email: hello@rise-wellbeing.co.uk
Telephone: 07481 806 086