Privacy Policy 

Practitioner Name:  Suzanne Cope, Two Hands Counselling
Professional Body: Registered Member of the British Association for Counselling and Psychotherapy (BACP)
Registration Number: 419749
Last Updated: September 2026

1. Introduction

I operate as a Data Controller committed to safeguarding your privacy in compliance with the UK GDPR, Data Protection Act 2018, and the BACP Ethical Framework.

2. Information I Collect

To deliver secure online services, I collect contact details, background/emergency info, technical connection data, and sensitive health/session records.

3. Lawful Basis for Processing Data

Data processing relies on Article 6 (performance of a contract for contact/session details) and Article 9 (health care provision for sensitive health records) of the UK GDPR, alongside vital interests in emergencies.

4. How I Store and Protect Your Data (Online Practice Security)

I use encrypted video platforms, password-protected cloud storage for digital records, strictly anonymised factual session notes separated from contact data, and anonymous clinical supervision in line with BACP guidelines.

5. Exceptions to Confidentiality

Sessions are confidential, but limits apply under the BACP Ethical Framework and law regarding severe harm, safeguarding, or legal/court obligations.

6. Data Retention (How Long I Keep Your Records)

Contact details are deleted shortly after therapy concludes, while anonymised clinical notes are kept securely for 7 years post-therapy (or until age 25 for minors) to meet insurance and BACP standards.

7. Your Rights

You retain rights to request access, corrections, or erasure of your data, and to lodge complaints with the Information Commissioner's Office (ICO).