Privacy Policy

Suzanne Eales t/a Lighthouse Healing respects your personal information and is committed to complying with UK data protection legislation, including the UK GDPR and the Data Protection Act 2018. Lighthouse Healing is registered with the Information Commissioner's Office (ICO) — reference number ZB721555.

1. Information I Collect

To work with you, I must comply with the UK GDPR. Under Article 6, I hold your contact information for the performance of our contract (managing appointments). Under Article 9, I hold clinical notes and health-related information because it is necessary for the provision of health and care services.

I collect personal information when you enquire about counselling services through this website or referral directories. This is for counselling purposes to assist in the effective administration of counselling sessions and the quality of the client treatment. This includes booking, rescheduling, and communicating with you regarding sessions. Without this I cannot provide services to you. This personal data includes identifiers such as names, contact details, counselling contracts, assessment information, letters, and counselling notes.

If you enquire about workshops, newsletters, or other communications, I will ask for relevant contact details to respond to your enquiry and keep you informed. This data is stored securely for as long as you agree to remain in contact.

2. Website & Analytics

I use Google Analytics to collect standard internet log information and visitor behaviour patterns for the purpose of improving this website. This information is processed in a way that does not identify individuals. I do not make, and do not allow Google to make, any attempt to identify visitors to this website. Please refer to the Google Analytics privacy notice for further information.

If you complete the contact form on this website, your data is temporarily held by the web host before being transmitted to me securely.

This website may use cookies for analytical purposes only. Should this change, this notice will be updated. You may disable cookies at any time through your browser settings.

3. Data Usage

Because counselling involves sensitive personal information relating to your health and wellbeing, I am required to meet stricter data protection standards. I process this information solely to provide safe, professional, and ethical care and to maintain accurate clinical records.

Your information is kept securely, and I will not share your personal details with any other person or organisation without your knowledge, except in the following circumstances which are inherent to safe and ethical counselling practice in line with the British Association for Counselling & Psychotherapy (BACP) ethical guidelines:

• Clinical supervision — as a registered BACP member I am required to attend regular clinical supervision. Your information may be discussed in this context to ensure you receive safe, ethical care. Supervisors are bound by the same confidentiality obligations as I am. Where possible, sessions are discussed without using identifying details.
• Legal obligation — where I am required by law to disclose information.
• Safeguarding — where there is a child or adult safeguarding concern, or a perceived risk of serious harm to you or another person.

Where possible, any decision to share information beyond supervision will be made after consultation with you. In safeguarding and legal situations this may not always be possible.

4. Data Storage & Retention

In accordance with my Professional Indemnity insurance requirements, personal data is archived at the end of counselling and held for up to seven years and then securely destroyed.

Client session notes are kept on paper in locked facilities in accordance with current data protection law. The purpose of notes is to keep a brief factual record of what the counsellor considers, from memory, to be the important aspects of the session. All archived data is stored securely. Any electronic data is either encrypted or deleted when no longer required. Your details will not be shared with any third party without your consent, except where required by law.

5. Security

I take all reasonable precautions to prevent the loss, misuse, or alteration of information you provide. Communications may be sent by email. Whilst I endeavour to keep all systems and communications protected, I cannot guarantee that all communications will be entirely free from risk.

6. Your Rights

You have the right to request access to, correction of, or deletion of any personal data I hold about you. To make a request, please contact me at privacy@lighthousehealing.co.uk. I will respond within one calendar month of receiving your request, in accordance with UK GDPR obligations.

7. Clinical Will

In the unlikely event that I become incapacitated or unable to continue working, I have a clinical will in place. This means that a trusted professional colleague has been designated to access only the minimum necessary contact information to notify you and, where appropriate, offer guidance on next steps. Session notes will then be securely destroyed.

8. Complaints

If you have a concern or complaint about how I handle your personal data, please contact me directly at privacy@lighthousehealing.co.uk. I will acknowledge your concern within 30 calendar days and respond as soon as possible.

If you remain dissatisfied following my response, you have the right to escalate your complaint to the Information Commissioner's Office at ico.org.uk.

9. Changes to This Notice

This privacy notice is reviewed regularly. Any material changes will be reflected here with an updated review date.