Privacy & GDPR Policy
Eleanor Stanford Psychotherapy is a counselling and psychotherapy practice run by Eleanor Stanford. I am registered with the Information Commissioner's Office (ICO) under registration number 00012179492.
If you have any questions about how I handle your personal data, you can contact me at e.stanfordtherapy[at]gmail[dot]com.
Last updated: June 2026
What personal data we collect
I collect and process the following types of personal data:
Contact details — your name, email address, telephone number, and postal address
Health and therapy-related information — the reasons you are seeking therapy, your presenting issues, relevant medical and mental health history, current medications, GP details, and emergency contact information
Session notes — written records of our therapy sessions, including your progress and themes discussed
Administrative records — appointment dates, invoices, and payment records
To process your personal data lawfully under UK GDPR, I rely on the following legal bases:
Article 6 basis (ordinary personal data)
Article 9 basis (special category data)
How we collect your data
I collect your personal data from you in the following ways:
When you first contact me to enquire about therapy
When you complete any intake or assessment forms
During our therapy sessions
Through email communications between sessions
I do not collect personal data about you from any third party. Electronic records are stored on password-protected devices.
How long we keep your data
In line with the Limitation Act 1980 and standard professional indemnity insurance requirements, I keep therapy records for 7 years after our final session. After this time the files will be destroyed or anonymised.
Who we share your data with
I share anonymised case material with my clinical supervisor, which is an essential part of maintaining professional standards and ensures I provide you with safe and effective therapy.
I have appointed a Clinical Executor who will act on my behalf if I become seriously ill, incapacitated, or die. My Clinical Executor is a qualified therapist bound by professional confidentiality, and will follow approach your records with the same care as if I were managing them myself.
I use the following third-party services which may process your personal data, but are bound by a data processing agreement that requires them to protect your data:
Squarespace — my website hosting provider
Zoom — for online therapy sessions
Kiku — for appointment scheduling
Subject access requests and data concerns
Anyone whose personal information I process has the right to know:
What information I hold and process on them
How to gain access to this information
How to keep it up to date
What I am doing to comply with the GDPR
If you have a concern about how I handle your personal information, please contact me directly at e.stanfordtherapy[at]gmail[dot]com.
I will acknowledge your complaint within 30 days of receiving it. I will aim to resolve your complaint within 3 months. I will take appropriate steps to investigate the complaint without undue delay, keep you informed where the investigation is continuing, and tell you the outcome without undue delay once I have finished looking into it. I will keep a confidential record of all data complaints and their outcomes.
If you're still not satisfied, you have the right to escalate your complaint to the Information Commissioner's Office (ICO). Website: www.ico.org.uk; Helpline: 0303 123 1113.
