GDPR Privacy Policy for LJC Counselling & Psychotherapy

​

Effective Date: January 24, 2024

​

This Privacy Policy outlines how LJC Counselling & Psychotherapy ("we," "us," or "our") collects, uses, discloses, and protects personal data of users ("you" or "your") accessing our website at https://www.ljccounselling.co.uk/ ("Website"). This policy complies with the General Data Protection Regulation (GDPR) and other applicable data protection laws.

​

1. Information We Collect

​

We collect and process the following personal data from you:

• Contact Information: Name, email address, phone number.

• Consultation Information: Date and time of booked consultations, nature of requested services.

• Website Usage Data: IP address, browser type, operating system, pages visited, duration of visits.

​

We collect this data through the following methods:

• Directly from you: When you contact us through the website, book a consultation, or provide information through forms.

• Automatically: When you browse our website, our servers collect standard log information.

​

2. Legal Basis for Processing

​

We process your personal data based on the following legal grounds:

• Consent: You provide consent when you contact us, book a consultation, or use our website.

• Contractual Obligations: To provide counselling services and fulfill our contractual obligations with you.

• Legitimate Interests: To improve our website, services, and marketing efforts. We only do so when our interests do not override your fundamental rights and freedoms.

​

3. How We Use Your Information

​

We use your personal data for the following purposes:

• To provide counselling services: To schedule consultations, communicate with you regarding your therapy, and deliver our services.

• To respond to your inquiries: To answer your questions and address your concerns.

• To improve our website and services: To analyze website usage data to understand your needs and preferences and improve our offerings.

• To send you marketing communications: With your consent, we may send you emails about our services and news. You can unsubscribe at any time.

​

4. Data Sharing and Disclosure

​

We will not share your personal data with third parties except in the following circumstances:

• With your consent: We will share your data with third parties when you explicitly request or authorize it.

• With service providers: We may share your data with trusted third-party service providers who help us operate our website and deliver our services. These providers are contractually obligated to protect your data and comply with GDPR regulations.

• To comply with legal obligations: We may disclose your data if required by law or to comply with a court order.

• To protect our rights and interests: We may disclose your data to protect our rights and interests, such as in the case of fraud or abuse.

​

5. Data Retention

​

We will retain your personal data for the following periods:

• Client Files: We retain client files for a minimum of 7 years after the termination of therapy, as required by professional regulations.

• Website Usage Data: We retain website usage data for a maximum of 2 years.

• Marketing Communications: We retain your contact information for marketing purposes until you unsubscribe.

​

6. Your Rights under GDPR

​

You have the following rights under GDPR:

• Right to access your data: You have the right to request a copy of your personal data that we hold.

• Right to rectification: You have the right to request the correction of any inaccurate or incomplete personal data.

• Right to erasure: You have the right to request the deletion of your personal data under certain circumstances.

• Right to restrict processing: You have the right to request the restriction of processing of your personal data.

• Right to data portability: You have the right to request the transfer of your personal data to another controller.

• Right to object: You have the right to object to the processing of your personal data for marketing purposes.

To exercise your rights, please contact us using the information below.

​

7. Security Measures

​

We take appropriate technical and organizational measures to protect your personal data from unauthorized access, disclosure, alteration, or destruction. These measures include:

• Secure servers and data encryption

• Access controls and password protection

• Regular security audits and updates

​

8. Children's Privacy

Our website and services are not intended for children under the age of 16. We do not knowingly collect or process personal data from children.

​

9. Changes to this Privacy Policy

We may update this Privacy Policy from time to time. We will post any changes on our website. We encourage you to review this policy regularly.

​

10. Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact us here

​​