Legal
Privacy Policy
Last updated: June 2025
1. Who I Am
Sophie Jayne Therapy is an online counselling and psychotherapy service operated by Sophie Jayne, a COSRT registered relationship therapist. For the purposes of UK data protection law, I am the data controller responsible for your personal information.
Contact: [email protected]
2. What Information I Collect
I may collect the following personal information:
- Contact details: your name, email address, and phone number when you get in touch or book a session.
- Booking information: appointment dates, times, and scheduling preferences collected through my booking system.
- Session notes: brief, confidential notes I keep to support our therapeutic work together.
- Payment information: payment records and transaction details. I do not store card numbers directly.
- Website usage: this website does not use cookies for tracking or analytics purposes.
3. How I Use Your Information
Your information is used to:
- Respond to your enquiries and arrange appointments
- Provide therapy sessions and manage our therapeutic relationship
- Send appointment reminders and follow-up communications
- Process payments for sessions
- Meet my professional and legal obligations as a registered therapist
4. Legal Basis for Processing
Under UK GDPR, I process your personal data on the following bases:
- Consent: you provide your information voluntarily when you contact me or book a session.
- Contract: processing is necessary to provide the therapy services you have requested.
- Legitimate interest: to manage my practice effectively and respond to enquiries.
- Legal obligation: where I am required to keep records by law or my professional body.
5. Third-Party Services
I use the following third-party services to deliver my practice:
- Google Meet: for delivering online therapy sessions. Google Meet uses encryption to protect session content and is covered by Google's privacy policy.
- Google Calendar: for scheduling appointments. Your name, email, and appointment details are stored securely within Google Workspace.
- Stripe: for processing payments securely. Stripe handles all card details directly, I never see or store your full card number. Stripe's privacy policy applies to payment data.
- Email provider: for correspondence. Emails are stored securely and not shared with third parties.
I choose providers that comply with UK GDPR requirements and take reasonable steps to ensure your data is handled securely.
6. Confidentiality
Everything discussed in therapy is confidential. I will not share what you tell me with anyone outside our sessions, except in the following circumstances:
- If I believe there is a serious risk of harm to you or someone else
- If I am required to do so by law (e.g. terrorism, drug trafficking, or court order)
- With your explicit written consent
- In clinical supervision, where your identity is anonymised
7. How Long I Keep Your Data
I retain session notes and client records for a minimum of seven years after our last session, in line with COSRT professional guidelines and insurance requirements. Contact details and booking records are retained for the same period. After this time, all records are securely destroyed.
8. Your Rights
Under UK GDPR, you have the right to:
- Access the personal data I hold about you
- Correct any inaccurate or incomplete information
- Delete your data, where there is no legal or professional requirement for me to keep it
- Restrict or object to certain types of processing
- Data portability: receive your data in a commonly used format
- Withdraw consent at any time, without affecting the lawfulness of prior processing
To exercise any of these rights, please email me at [email protected].
9. Complaints
If you are unhappy with how I have handled your personal data, you have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk or by calling 0303 123 1113.
10. Changes to This Policy
I may update this privacy policy from time to time. Any changes will be posted on this page with an updated revision date. I encourage you to review this policy periodically.