GDPR & Data Protection Policy

At Enough As You Are Counselling, I take your privacy and the protection of your personal data seriously. This page explains how your information is collected, stored, and used in accordance with the UK General Data Protection Regulation (UK GDPR).

1. Data Controller
I, Felicitas Engelhard, am the sole data controller for Enough As You Are Counselling And Therapy. I am registered with the Information Commissioner's Office (ICO), and I am responsible for ensuring your data is handled lawfully and transparently.

2. What Information I Collect
When you contact me or begin counselling, I may collect:

  • Your name and contact details

  • Emergency contact information

  • Relevant health or background information that you choose to share

  • Notes from our sessions (kept securely and confidentially)

  • Invoicing or payment information (if applicable)

3. Why I Collect This Information
Your data is collected for the purpose of delivering safe, ethical, and effective counselling. It helps me:

  • Respond to your enquiries

  • Provide appropriate therapeutic support

  • Maintain secure client records in line with professional standards

  • Fulfil my legal, ethical, and contractual obligations

4. How Your Information Is Stored
All data is stored securely, whether in electronic or paper format. I use encrypted devices and secure platforms for any digital communication or documentation.

5. How Long I Keep Your Data
Client records are kept for a period of 7 years after the end of therapy, in line with guidance from professional bodies such as the BACP. After this period, records are securely destroyed.

6. Sharing of Data
Your information will never be sold or shared for marketing purposes. I will not share your data with any third party unless:

  • You give explicit consent

  • I am legally required to do so

  • I believe there is a serious risk of harm to you or someone else, in line with my duty of care

7. Your Rights
Under the UK GDPR, you have the right to:

  • Access your data

  • Request corrections

  • Request erasure (in some circumstances)

  • Withdraw consent (where applicable)

  • Lodge a complaint with the ICO if you believe your data has been mishandled

8. Use of Website and Cookies
This website may use basic cookies to enhance the browsing experience. These do not collect identifying information and can be controlled through your browser settings.

Contact
If you have any questions about this policy or your data, you can contact me at hello@enoughasyouare.co.uk.

This policy may be updated periodically to reflect changes in data protection practices.

Last updated: July 2025