Privacy Policy

​Professional Registration

I am registered with the Information Commissioner's Office (ICO) and process personal information in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.  My ICO registration number will be published here once available.  I am a registered Arts Therapist with the Health and Care Professions Council (HCPC) and comply with the HCPC Standards of Conduct, Performance and Ethics, including requirements relating to confidentiality, record-keeping and the secure handling of personal information. 

Online Therapy Sessions

Where sessions are conducted online, I use Zoom as a secure video conferencing platform.  Zoom processes certain information necessary to provide online sessions, such as your name, email address, IP address and device information. I take reasonable steps to ensure that online sessions are conducted securely and confidentially.  Clients are encouraged to participate in sessions from a private location and to use secure internet connections wherever possible. 

Record Retention

As an HCPC-registered Arts Therapist, I maintain records in accordance with professional, legal and insurance requirements.  Unless there is specific reason to retain records for longer, records are typically retained for:

Seven years after the end of therapy for adult clients; and until a child client reaches the age of 25, or for seven years after therapy ends, whichever is longer.  At the end of the retention period, records are securely destroyed or permanently deleted.

​Data Protection Concerns and Complaints

If you have a concern about how your personal data has been handled, for example, a request to access or delete your records that was not dealt with to your satisfaction, or a concern about whether your information was shared appropriately or stored securely, please raise it with me directly in the first instance.  Please note that this covers concerns about data handling only, not about the therapeutic relationship or professional conduct, which are dealt with separately.  To raise a data protection concern, please contact me at sussexengage@gmail.com. I will acknowledge your concern within 30 days and respond as promptly as possible.  If you remain dissatisfied, you have the right to raise a complaint with the Information Commissioner's Office (ICO) at ico.org.uk or on 0303 123 1113.  Concerns relating to professional conduct may also be raised with the Health and Care Professions Council (HCPC) through its fitness to practise procedures.​