Effective Date: 1st August 2025
Young Life Psychotherapy – Heather Young NCPS Accredited Therapist
Based in Carluke, South Lanarkshire, UK
This privacy policy explains how I collect, store, and use your personal information in line with UK data protection laws (UK GDPR and the Data Protection Act 2018). Your confidentiality and privacy are fundamental to how I work.
Who I Am
I am Heather Young, an NCPS-accredited integrative therapist based in Carluke, offering
in-person and online therapy to adult clients. I am the data controller for Young Life Psychotherapy.
If you have any questions about this policy or how your data is handled, you can contact me at:
Email: younglifepsychotherapy@gmail.com
Phone: 07552465977
What Information I Collect;
When you contact me or attend therapy sessions, I may collect the following:
– Name, email address, and phone number
– Emergency contact information
– Relevant medical or mental health information
– Session notes (brief, anonymised & securely stored)
• Counselling contract and intake forms
• GDPR agreement (this document)
– GP contact (only used in specific safeguarding situations)
– Payment information (if applicable)
How I Use Your Information
Your information is used for the following purposes:
– To contact you about appointments or respond to enquiries
– To provide effective therapy and keep accurate records
– To comply with legal and ethical requirements (e.g., NCPS, insurance, supervision)
– For invoicing or record-keeping if needed for tax purposes
How Your Information is Stored
Your personal data is stored securely digitally (in encrypted files/password-protected devices). I do not share your personal data with third parties unless:
– You give clear, written consent
– I am required to do so by law (e.g., serious risk of harm, safeguarding, terrorism)
– It is necessary for supervision (always anonymised)
Online Therapy & Digital Communication
If you attend online therapy, I use secure, encrypted platforms (such as Zoom & Bilateral Base) for sessions.
Communication by email or phone is kept to essential logistics only. While every effort is made to protect your privacy, no digital system is 100% secure, so please keep this in mind when communicating online.
Data Retention
Client records and notes are kept securely for up to 7 years after therapy ends, in line with professional and insurance guidelines. After this period, records are safely deleted or destroyed.
Your Rights
You have the right to:
– Request access to the personal data I hold about you- Ask for inaccurate data to be corrected
– Request your data be deleted (unless I am legally required to keep it)
– Withdraw consent at any time (where applicable)
If you wish to exercise these rights, contact me directly. If you’re concerned about how your data is handled, you can contact the Information Commissioner’s Office (ICO): https://ico.org.uk
Updates to This Policy
This privacy policy may be updated from time to time. The most current version will always be available on my website.
Last updated: 1st August 2025
