Privacy Notice for Clients and Supervisees -Last updated: June 2026
Introduction
I am Tanya Orr, a counsellor/psychotherapist and supervisor providing counselling and supervision services through Tanya Orr Therapy.
I am committed to protecting your privacy and handling your personal information in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
This privacy notice explains what personal information I collect, why I collect it, how I use it, and your rights regarding your data.
Data Controller – Tanya Orr – Tanya Orr Therapy
Address: 41 Bath Road, Old Town Swindon SN1 4AS
Email: tanyaorrtherapy@gmail.com        07482 449834

As the data controller, I am responsible for deciding how your personal information is collected and used.
I may collect and process the following information:
Before Therapy Begins
Name , Address, , email address, Telephone number, Date of birth, GP details
Emergency contact information and information you provide when making an enquiry
During Therapy
Assessment information, Session notes, Correspondence by email, text, telephone or post, Appointment records, Payment records and invoices
Website Information
If you visit my website, I may collect: IP address, Browser type, Website usage information through cookies.)

Why I Collect Your Information
I collect and use your information to: Provide counselling services, Arrange and manage appointments, Maintain clinical records, Ensure your safety and wellbeing
Meet professional and ethical requirements, Manage payments and accounts, Comply with legal obligations, Lawful Basis for Processing Under UK GDPR, I process your personal information under the following lawful bases:
Contract -Processing is necessary to provide counselling services requested by you.
Legal Obligation- Processing is necessary to comply with legal requirements.
Legitimate Interests- Processing is necessary for the effective and safe provision of counselling services.
Special Category Data-Information about your mental health is classified as special category data.
I process this information under Article 9(2)(h) UK GDPR, which permits processing for health and therapeutic purposes.

Confidentiality
Everything discussed during counselling is treated confidentially.

However, confidentiality may be broken where:
There is a serious risk of harm to yourself or others.
There is a safeguarding concern involving a child or vulnerable adult.
I am required by law or court order to disclose information.
There is evidence of terrorism, money laundering, or other legal obligations requiring disclosure.
Where possible, I will discuss this with you before sharing information.

Session Notes
I keep brief clinical notes to support the counselling process and meet professional requirements. These notes are: Stored securely, Kept confidential, Accessible only to me unless disclosure is legally required.

How Your Information Is Stored
I take appropriate steps to keep your information secure.
This may include: Password-protected devices, Encrypted storage systems, Secure email services, Locked filing cabinets for paper records

Online Counselling
Where counselling is conducted online, I may use platforms such as: Zoom or WhatsApp
While reasonable security measures are used, no internet-based service can be guaranteed completely secure.

Sharing Information
I do not sell or share your personal information for marketing purposes.
Information may be shared only when necessary with:
Your GP (with your consent unless there is a serious safety concern)
Professional supervisors (anonymised wherever possible)
Legal or regulatory authorities where required by law
Data Retention
Client records are normally retained for 2 years after therapy ends, 1 year for supervision. After this period, records will be securely destroyed.
Financial records may be retained longer where required for tax and accounting purposes.
Your Rights
Under UK GDPR, you have the right to:
Access your personal data, Request correction of inaccurate data, Request erasure of your data in certain circumstances, Restrict processing, Object to processing
Request transfer of your data where applicable, lodge a complaint with the Information Commissioner's Office (ICO)
Complaints
If you have concerns about how your information is handled, please contact me first.
You also have the right to complain to:
Information Commissioner's Office
Website: ico.org.uk
Telephone: 0303 123 1113
Contact
If you have questions about this privacy notice or your personal information, please contact myself.