Privacy Notice - Laura Britton Psychotherapy
Updated June 2026
Introduction
I understand how important your privacy is. I am committed to protecting your personal information and maintaining confidentiality in accordance with UK GDPR, the Data Protection Act 2018, the Data (Use and Access) Act 2025, and the ethical frameworks of UKCP and BACP.
Data Controller
Laura Britton Psychotherapy is the Data Controller for the personal information collected and processed through this practice.Email:
Telephone: 07434 630519
ICO Registration Number: ZA326387
Information Collected
Personal information may include your name, address, date of birth, telephone number, email address, GP details, emergency contact details, appointment records, correspondence, health information relevant to therapy, safeguarding information, and information submitted via website enquiries and contact forms.
How Your Information Is Used
Information is used to provide psychotherapy, EMDR therapy and outdoor therapy services, arrange appointments, maintain records, communicate with you, fulfil legal and safeguarding obligations, process payments and manage the practice safely and effectively.
Lawful Basis for Processing
Personal information is processed under Contract, Legal Obligation, Legitimate Interests, Provision of Health Care under Article 9(2)(h) UK GDPR, and Consent where appropriate.
Where Personal Information Comes From
Personal information is usually collected directly from you. In some circumstances information may also be received from parents or legal guardians, referring organisations, health professionals including GPs, schools, colleges or educational settings, and other professionals involved in your care where appropriate consent has been obtained or another lawful basis applies.
Website Information, Cookies and Analytics
The website may use cookies and analytics tools to understand how visitors use the site and to improve website performance. Technical information such as IP addresses, browser type, device information and page usage may be collected. Third-party websites linked from this site operate under their own privacy policies and users should review those policies before providing personal information.
Storage and Security
Personal information is stored securely using password-protected and encrypted systems, including Zanda Health and secure email services. Appropriate technical and organisational measures are used to protect information from unauthorised access, loss, misuse or disclosure.
Zanda Health
I use the secure, encrypted and password-protected practice management platform Zanda Health to store client information, appointment records and clinical documentation. Access is restricted to me.
Confidentiality
Everything discussed in therapy is confidential unless there is concern regarding your safety or the safety of another person, safeguarding responsibilities, legal obligations, or a court order requiring disclosure. Wherever possible, confidentiality limits will be discussed with you first.
Supervision
I discuss my clinical work within professional supervision to ensure safe and effective practice. Supervisors are bound by confidentiality and identifying information is minimised wherever possible.
Online Therapy
Online sessions are conducted using secure platforms of Zoom and Bilateral Base. Reasonable steps are taken to ensure privacy and confidentiality; however, no online technology can guarantee absolute security.
Retention of Records
Adult client records are normally retained for seven years after therapy ends. Records relating to children and young people are retained until the client reaches 25 years of age (seven years after their 18th birthday), in accordance with professional guidance, legal obligations and insurance requirements. Records are then securely reviewed and confidentially destroyed when no longer required.
Your Rights
You have the right to request access to your personal information, request correction of inaccurate information, request restriction of processing, object to processing where applicable, request erasure where legally appropriate, request data portability where applicable, and lodge a complaint.
Subject Access Requests
You may request access to the personal information held about you. Requests will be responded to without undue delay and, in any event, within one month unless a lawful exemption applies.
Data Breaches
In the event of a reportable personal data breach, appropriate action will be taken in accordance with UK GDPR requirements, including notification to the Information Commissioner's Office where required.
Data Protection Complaints
If you have concerns about how your personal information has been collected, stored, used or shared, please contact me in the first instance at
Website Disclaimer
The information contained on this website is for general information purposes only. Whilst reasonable efforts are made to ensure that information is accurate and up to date, no guarantees are given regarding completeness, accuracy or suitability.Accessing this website or contacting Laura Britton Psychotherapy does not create a therapeutic relationship. Therapy services only commence following consultation, assessment and agreement to work together.This website may contain links to third-party websites. Laura Britton Psychotherapy accepts no responsibility for the content, privacy policies or practices of external websites.This website is not monitored continuously and should not be used in an emergency. If you are concerned about your immediate safety or the safety of another person, please contact emergency services, NHS 111, your GP or an appropriate crisis service.
Links
The website may have links to third party sites we have no control over. If you visit those sites you should check you are happy with their own privacy policies and terms of use before providing any personal information. In addition, if you are linked to our website from a third party, we cannot be responsible for the privacy policies and practices of that third party site.Where your data is storedThe data collected will be stored securely online, presently hosted by EU and UK based servers.We use Transport Layer Security (TLS) to encrypt and protect email traffic. If your email service does not support TLS, you should be aware that any emails we send or receive may not be protected in transit.We will also monitor any emails sent to us, including file attachments, for viruses or malicious software. Please be aware that you have a responsibility to ensure that any email you send is within the bounds of the law. Should you choose to contact us using an email link, or our contact form none of the data that you supply will be stored by this website or passed to / be processed by any of the third party data processors.Instead the data will be collated into an email and sent to us over the Transport Layer Security (TLS).This website is hosted by 3rd party servers located in the UK and EU which are compliant with EU legislation.
Changes to this Notice
This Privacy Notice may be updated from time to time to reflect changes in legislation, professional guidance, technology or practice procedures.
