Privacy Policy

I am committed to complying with the terms of the General Data Protection Regulation (GDPR) and to the responsible and secure use of your data.  I have a legitimate interest in processing personal data to provide counselling services.

The purpose of this document is to let you know what personal information I, Jacquie Haylett collects and holds, why I collect this data, how long it is stored for and your rights over your personal data.

With regard to GDPR compliance this policy refers to written documents, hard copies of client notes, emails, text messages, Whatsapp messages, database entries, visits to my professional website www.acorncounselling.co.uk and communication via social media.

If you have any complaints about the way I am using your information please contact me, Jacquie Haylett, Data Processor by emailing acorncounsellinguk@gmail.com

Data is collected for the sole purpose of providing an appropriate service for the individual, (legally termed as ‘Legitimate Interests).  I collect personal information from you when you enquire about counselling services to set up an initial appointment. 

When you enquire about counselling I ask for contact details and relevant personal information from you that is needed to answer your enquiries and to keep you informed.

Your data will only be used to provide you with my services and to give you information relating to my services.

On rare occasions there may be a legal and professional ethical requirement to break confidentiality to ensure the safety of yourself and others, but I will always try to consult with you first where possible before breaking confidentiality, however please be aware that the following exclusions apply:

I will not share your details with any other person or organisation without your knowledge and permission unless there is a legal requirement as stated in the counselling contract or

• If I believe there is a serious danger of harm to yourself or a third party.
• If I believe you or a third party is involved in a serious criminal activity, such as terrorism or people trafficking.
• If I would be liable to civil or criminal court proceedings if the information I hold were not disclosed.

Hard copies of personal information are stored in a locked cabinet and archived when our therapeutic relationship ends for 7 years.  Any brief handwritten notes taken during or following each session are anonymised and securely stored.

Correspondence via email is processed by Microsoft or Google and  therefore subject to their privacy policies.  It is recommended that no sensitive information be shared via email.  Data processed by online video call platforms such as Microsoft Teams, Whereby, Skype, Zoom or other, will be subject to their privacy policy.  Telephone calls are not recorded, however voicemails and text messages may be stored for up to 90 days.  As per standard business practice I may use your telephone number to return your call.  All electronic devices used which hold personal data are password protected. 

If you make regular payments to me your email and name may be used to process these payments electronically.

In the unlikely event of a data breach I will comply with GDPR regulations regarding action taken and reporting.

You have a right to access the information that I hold on you.  A request to access this information should be made in writing.  Your information will be released to you within 30 days of receipt of your request and will be subject to an admin charge