Privacy Policy

Effective Date: 1st August 2025

Young Life Psychotherapy – Heather Young NCPS Accredited Therapist

Based in Carluke, South Lanarkshire, UK

This privacy policy explains how I collect, store, and use your personal information in line with UK data protection laws (UK GDPR and the Data Protection Act 2018). Your confidentiality and privacy are fundamental to how I work.

Who I Am

I am Heather Young, an NCPS-accredited integrative therapist based in Carluke, offering

in-person and online therapy to adult clients. I am the data controller for Young Life Psychotherapy.

If you have any questions about this policy or how your data is handled, you can contact me at:

Email: younglifepsychotherapy@gmail.com

Phone: 07552465977

What Information I Collect;

When you contact me or attend therapy sessions, I may collect the following:

– Name, email address, and phone number

– Emergency contact information

– Relevant medical or mental health information

– Session notes (brief, anonymised & securely stored)

• Counselling contract and intake forms

• GDPR agreement (this document)

– GP contact (only used in specific safeguarding situations)

– Payment information (if applicable)

How I Use Your Information

Your information is used for the following purposes:

– To contact you about appointments or respond to enquiries

– To provide effective therapy and keep accurate records

– To comply with legal and ethical requirements (e.g., NCPS, insurance, supervision)

– For invoicing or record-keeping if needed for tax purposes

How Your Information is Stored

Your personal data is stored securely digitally (in encrypted files/password-protected devices). I do not share your personal data with third parties unless:

– You give clear, written consent

– I am required to do so by law (e.g., serious risk of harm, safeguarding, terrorism)

– It is necessary for supervision (always anonymised)

Online Therapy & Digital Communication

If you attend online therapy, I use secure, encrypted platforms (such as Zoom & Bilateral Base) for sessions.

Communication by email or phone is kept to essential logistics only. While every effort is made to protect your privacy, no digital system is 100% secure, so please keep this in mind when communicating online.

Data Retention

Client records and notes are kept securely for up to 7 years after therapy ends, in line with professional and insurance guidelines. After this period, records are safely deleted or destroyed.

Your Rights

You have the right to:

– Request access to the personal data I hold about you- Ask for inaccurate data to be corrected

– Request your data be deleted (unless I am legally required to keep it)

– Withdraw consent at any time (where applicable)

If you wish to exercise these rights, contact me directly. If you’re concerned about how your data is handled, you can contact the Information Commissioner’s Office (ICO): https://ico.org.uk

Updates to This Policy

This privacy policy may be updated from time to time. The most current version will always be available on my website.

Last updated: 1st August 2025