YOUR INFORMATION
Privacy Policy
Last updated: October 2026
This policy explains what personal information I collect when you visit this website, get in touch or have counselling with me, why I need it, how I keep it safe and what your rights are. I've tried to keep it in plain English. If anything isn't clear, please ask.
ON THIS PAGE
1. Who I am
2. What information I collect
3. Why I use it, and the legal basis
4. Who I share it with
5. Information stored outside the UK
6. How long I keep it
7. Keeping it safe
9. Your rights
10. How to complain
11. Changes to this policy
In short
I only collect what I need to arrange and provide counselling.
Therapy Care is the private counselling practice of Carey Webb, a registered member of the British Association for Counselling and Psychotherapy (BACP). I'm the data controller for the information described in this policy, which means I decide how it's used and I'm responsible for keeping it safe.
I never sell your information or use it for marketing.
What you share in sessions is confidential, within the limits explained in my Terms.
You can ask to see, correct or delete your information at any time.
1. Who I am
Address
Phone
ICO registration
1212a London Road, Leigh-on-Sea, Essex, SS9 2UA
ZC271061 (registered as Carey Webb)
2. What information I collect
When you get in touch
If you use the contact form, call, message me on WhatsApp or email me, I'll have your name, phone number and email address, how you'd prefer to have sessions, and anything you choose to tell me in your message.
If you become a client
-
Your name, contact details, address and date of birth
-
An emergency contact and your GP's details
-
Anything you choose to share about your health, wellbeing, previous counselling and life circumstances
-
How you heard about me
-
Brief notes I write after each session
-
A record of your appointments and payments
When you visit this website
Technical information such as your device, browser and the pages you visit, collected through cookies. Analytics and advertising cookies are only used if you agree to them. See Cookies below.
3. Why I use it, and the legal basis
Data protection law says I must have a lawful reason for using your information. These are the reasons I rely on:
What I use it for
Legal basis
Replying to your enquiry and arranging a consultation or first session
Legitimate interests, and taking steps you've asked for before we agree to work together
Providing counselling, keeping notes and managing appointments
To carry out our counselling agreement (contract)
Information about your health and wellbeing
This is "special category" information. I use it because it's needed to provide health care (counselling), under a duty of confidentiality: UK GDPR Article 9(2)(h)
Discussing my work in clinical supervision, without identifying details
Legitimate interests, and a requirement of my professional body
Payment and tax records
Legal obligation
Analytics and advertising cookies
Your consent, which you can withdraw at any time
Sharing information to protect someone from serious harm
Vital interests or legal obligation (see below)
4. Who I share it with
I never sell your information or share it for marketing. I only share it in these situations:
-
Clinical supervision. Like all BACP members, I discuss my work with a qualified supervisor. I don't share your name or anything that would identify you, and my supervisor is bound by confidentiality.
-
Services that help me run the practice. These include Wix (this website and its forms), Google (my email), WhatsApp (messages and video sessions), Monzo (bank transfers and online payments), SyncDiary (my secure online client records and appointments) and my accountant (financial records only). They can only use your information to provide their service to me.
-
When the law requires it, or to protect someone. For example under a court order, if I learn of terrorism, drug trafficking or money laundering, or if there's a serious risk of harm to you or someone else, including concerns about a child or vulnerable adult. Wherever it's possible and safe, I'll talk to you first.
5. Information stored outside the UK
Some of the services I use, such as Wix, Google and WhatsApp, may store information outside the UK. When they do, it's protected by the safeguards UK law requires, such as adequacy regulations or approved contract clauses.
6. How long I keep it
-
Enquiries that don't lead to counselling: deleted within six months of our last contact.
-
Client records and session notes: kept for five years after our last session, then securely destroyed.
-
Payment records: kept for six years, to meet tax requirements.
7. Keeping it safe
I keep notes brief and only record what's needed. Paper records are kept in a locked cabinet, and digital records are kept in SyncDiary, a password-protected, secure online system. Only I have access to your client records.
8. Cookies
Cookies are small files stored on your device when you visit a website. My website is hosted by Wix, which uses some cookies to make the site work.
Essential cookies keep the site secure and working properly, for example remembering your cookie choices and letting forms be sent. These are always on, because the site can’t work without them.
With your permission, I may also use:
-
Functional cookies, which let features such as the Google Map on my contact and area pages work.
-
Analytics cookies (Google Analytics), which show me how people find and use the site, such as which pages are visited. I use this to improve the site, not to identify you.
-
Marketing cookies (Google Ads and Meta), which help me see whether my adverts are working. These may be set by Google or Meta, who handle that information under their own privacy policies.
Your choice
When you first visit, a banner asks whether you’re happy to accept these cookies. You can:
-
accept all of them;
-
decline all non-essential cookies;
-
or choose which types to allow.
If you decline, only essential cookies are used. The site will still work.
You can change your mind at any time using the Cookie settings button, which appears at the bottom of every page. You can also delete cookies or block them through your browser settings.
9. Your rights
-
Ask for a copy of the information I hold about you
-
Ask me to correct anything that's wrong or incomplete
-
Ask me to delete your information
-
Ask me to limit how I use it, or object to how I use it
-
Ask for your information to be transferred to you or someone else
-
Withdraw your consent at any time, where I'm relying on it
You have the right to:
There's no charge, and I'll reply within one month. Some rights have limits; for example, I may need to keep certain records for legal reasons, and I'll explain if that applies. To make a request, email carey@therapycare.co.uk.
10. How to complain
If you're unhappy with how I've used your information, please tell me first and I'll do my best to put it right.
You can also complain to the Information Commissioner's Office (ICO) at ico.org.uk/make-a-complaint or by calling 0303 123 1113.
11. Changes to this policy
I'll update this policy if the way I use information changes. The date at the top shows when it was last updated.