Data Protection & Privacy Policy

Catherine Scannell Counselling is committed to protecting and respecting your privacy.

My website ( is pretty straight forward and the only place data from you will be collected is through the contact form or email/page links – which is SSL protected so fully encrypted, as is the rest of the website.

By entering counselling with me then I will hold your personal data in the form of a contact details form attached to my contract, as an agreement to terms and conditions of the therapeutic relationship.

This policy therefore sets out the basis on which any data I collect from you, or that you provide to me, will be processed by me.

****For the purpose of the Data Protection Act (the Act) (Soon to be General Data Protection Regulation) (GDPR) (Regulation (EU) 2016/679), the data controller is Catherine Scannell of Catherine Scannell Counselling.****

Secure Storage

Your details will be stored and kept securely and confidentially in a safe filing system (in a locked and secured Filing Cabinet). Once our therapeutic relationship has ended, printed off forms will be shredded and discarded.

Information I may collect from you

I may collect and process the following data about you:

Information provided by you –

You may provide information about yourself by filling in forms directly, on my website or by corresponding with me by phone or email, and other.

This includes information you provide when you send a message through my website contact form or link.

The information you provide may include but not limited to your name, address, e-mail address and phone number.

Information I collect about you

NOTE: My website is hosted by TSOHost, they have informed me that my website won’t collect any other data from you but the data found on my contact me link. In line with GDPR my website covers the requirements and a page is made available to view.

Uses made of information

I use information held about you in the following ways:

Information you provide and information I collect about you-

I will use this information to carry out my professional and contractual obligations during our therapeutic relationship. This includes:

  • Contracting and ensuring terms found in the contract are upheld by both parties.
  • In case of emergencies or where disclosure may be necessary – I will contact your GP or next of kin in these cases with your knowledge and consent UNLESS it is a case of terrorism or money laundering, which by law I must report without the need of consent.

Information I receive from other sources

This might only be the case when referred by third parties. The data will be handled safely as above.

Disclosure of your Information

I will not share your personal information with anyone else, unless there is duty to disclose in order to comply with any legal obligation (terrorism alerts, money laundering).

The only other person involved in your case: – only your first name will be known to them – this will be my Supervisor who is held by the same privacy, data protection and confidentiality clauses as described in my contract.

Where I store your personal data

The data collected will be kept in a password protected electronic system, in a password protected document. Only codes are used for the electronic booking system. Paper based documents are stored in a locked filing cabinet, no full names will be used, only codes for example, AB01/18.

Your rights

You have the right to ask for a copy of your personal information, free of charge in an electronic or paper format. You have the right to ask me to change any incorrect information about you.

Right to be forgotten

You have the right to ask me to delete any information that I hold about you, including personal information that is no longer relevant to original purposes, for example, when our therapeutic relationship has ended or if you wish to withdraw consent. In all cases and when considering such requests these rights are obligatory unless its information that I have a legal obligation to retain.

Data Portability

You have the right to receive your personal information as previously provided and to transfer this information to another party.