top of page

Privacy Policy

Privacy Policy & GDPR Statement

​

1. Purpose of This Policy

This Privacy Policy explains how I, Rafi Cooper, psychodynamic therapist, collect, use, store, and protect your personal information in accordance with the UK GDPR, the Data Protection Act 2018, and the BACP Ethical Framework. It applies to all therapy clients engaging in counselling with me.

The policy supports the therapeutic contract and ensures you understand how your data is handled as part of our work together.

​

2. Data Controller

Data Controller: Rafi Cooper, London’s Therapy Email: rafi@londonstherapy.com

I am responsible for deciding how your personal information is processed and for ensuring compliance with UK data protection law.

​

3. What Information I Collect

I collect only the minimum personal data required to provide safe, ethical therapy.

3.1 Personal Identification Data

  • Name

  • Contact details (email, phone number)

  • Emergency contact 

3.2 Administrative & Financial Data

  • Session attendance records

  • Invoices and payment records

3.3 Therapeutic Information

  • Brief clinical notes

  • Information you share during sessions

  • Relevant background information you choose to provide

I do not collect unnecessary or intrusive data. I do not record sessions.

 

4. Why I Collect Your Data (Legal Basis)

Your data is processed under the following lawful bases:

  • Contractual obligation: to provide psychotherapy safely and professionally

  • Legitimate interest: to maintain therapeutic records and continuity of care

  • Legal obligation: to comply with UK law, safeguarding duties, and professional standards

  • Consent: for holding minimal personal details (as stated in your contract)

If you wish to explore any of these bases further, you can ask me about legal basis or consent.

​

5. How Your Data Is Used

Your data is used solely for:

  • Providing psychotherapy

  • Managing appointments, cancellations, and communication

  • Maintaining accurate clinical notes

  • Ensuring your safety and wellbeing

  • Complying with professional supervision requirements

  • Issuing invoices and processing payments

I do not use your data for marketing, profiling, or automated decision‑making.

 

6. Confidentiality & Supervision

All therapeutic content is confidential.

I discuss my work in clinical supervision, as required by the BACP Ethical Framework. These discussions are anonymised and focus on supporting your therapeutic process.

If you want more detail, you can ask about supervision or confidentiality.

​

7. Exceptions to Confidentiality

I may need to share information without your consent if:

  1. You present a serious risk of harm to yourself or others

  2. A child or vulnerable adult is at risk

  3. You disclose information relating to terrorism or serious criminal activity

  4. I am legally compelled by a court order

Where possible, I will always try to discuss this with you first unless the urgency of the situation prevents it.

​

8. How Your Data Is Stored

  • Digital records are stored securely on encrypted devices

  • Emails are stored within secure, password‑protected systems

  • Access is restricted solely to me

I take all reasonable steps to prevent unauthorised access, loss, or misuse of your data.

​

9. How Long Your Data Is Kept

In line with your contract and professional guidance:

  • Client records are kept for five years after therapy ends

  • After five years, all records are securely destroyed

Financial records may be retained longer if required by HMRC.

 

10. Sharing Your Data

Your data is not shared with third parties except:

  • In the safeguarding situations listed above

  • With my clinical supervisor (anonymised)

  • With legal authorities if required by law

  • I do not sell, trade, or distribute your data.

 

11. Your Rights Under UK GDPR

You have the right to:

  • Access your personal data

  • Request correction of inaccurate data

  • Request deletion of data (subject to legal and ethical limits)

  • Restrict processing in certain circumstances

  • Object to processing

  • Request a copy of your data in a portable format

  • Withdraw consent where consent is the legal basis

To exercise any of these rights, email me at rafi@londonstherapy.com.

If you want help understanding these rights, you can ask about GDPR rights.

 

12. Communication Outside Sessions

Your email address is used only for:

  • Scheduling

  • Cancellations

  • Practical matters relating to therapy

Therapeutic content should be discussed in sessions, not by email or phone.

I do not communicate via social media with clients.

 

13. Website & Cookies (If Applicable)

If you use my website, basic technical data (e.g., IP address, browser type) may be collected automatically through standard cookies. This is used only to ensure the website functions properly.

I do not use analytics cookies 

​

14. Complaints

If you have concerns about how your data is handled, please speak with me first.

If unresolved, you may contact:

  • Information Commissioner’s Office (ICO)

  • BACP Customer Services for professional conduct concerns

 

15. Updates to This Policy

This Privacy Policy may be updated periodically. You will be informed of any significant changes.

​

bottom of page