Privacy Policy

Last updated: 21 September 2026

North Liverpool Counselling & Psychotherapy ("NLCP", "I", "me") is operated by Jack Holland as a sole trader. I am registered with the Information Commissioner's Office (ICO), registration number C1969461. This policy explains what personal data I collect, why, and how I look after it.

What I collect

• Contact enquiries: name, email address, and any information you include in a message sent via the contact form or by email.
• Client records: if we begin working together, I keep clinical notes and basic contact details as part of standard therapeutic practice.
• Website usage data: see the Cookie Policy for details on cookies and analytics, if any are used.

Why I collect it

I use this information to respond to enquiries, arrange and deliver therapy sessions, meet my professional and legal obligations (including those set out by UKCP), and maintain accurate clinical records.

For enquiries made before we begin working together, I rely on your consent in contacting me. Clinical notes are different: they contain special category data under UK GDPR (health information, including mental health), which needs an additional legal condition on top of an ordinary lawful basis. For clinical records, I rely on our therapy contract as the lawful basis, together with the health and social care condition under Article 9(2)(h) of UK GDPR, rather than consent. This reflects that keeping accurate records is a necessary, expected part of receiving therapy from a UKCP-registered practitioner bound by professional confidentiality, not something you are asked to separately opt into.

How long I keep it

Clinical session notes are kept for seven years after the end of therapy, in line with standard UKCP-aligned professional practice and typical professional indemnity insurance requirements. Enquiry messages that don't lead to ongoing work are deleted within 12 months.

Confidentiality

What you share with me is treated as confidential, within the ethical and legal limits of professional practice. These limits are: where there is a risk of serious harm to you or someone else, where I am legally required to disclose information (for example, under a court order or safeguarding law), where material is discussed, anonymised wherever possible, in my clinical supervision as a routine and required part of ethical practice, and in the rare event of a professional complaint or insurance claim. I'll always talk through what this means with you before we begin working together.

Who I share it with

I do not sell or share your personal data with third parties for marketing purposes. Limited information may be shared with my clinical supervisor, in line with standard confidential supervision practice, without identifying detail wherever possible. I may also be required to share information where I have a legal or safeguarding obligation to do so.

If I'm unable to continue practising

In line with recommended professional practice, I have arrangements in place for a nominated colleague to act as my clinical executor if I become unexpectedly unable to continue practising, whether through illness, incapacity, or death. They would contact current clients to explain the situation and support you in arranging continuing care elsewhere, and would be responsible for the secure handling or confidential destruction of clinical records in line with the retention period set out above.

Where it's stored

My in-session clinical notes are handwritten and kept securely in a locked filing cabinet, accessible only to me. Contact form enquiries submitted through this website are collected and stored by Netlify (the platform hosting this site) via its Netlify Forms service. Netlify stores this data on servers located in the United States; this transfer is safeguarded under Standard Contractual Clauses and the UK/EU-US Data Privacy Framework. Online sessions are held via Google Meet, using the same Google Workspace account as my practice email. As with the contact form, this makes Google a data processor for session calls; where data is transferred outside the UK, this is safeguarded under Standard Contractual Clauses and the UK/EU-US Data Privacy Framework.

Your rights

Under UK GDPR, you have the right to ask what personal data I hold about you, request a copy of it, ask me to correct inaccuracies, and in some circumstances ask me to delete it or restrict how it's used. To make a request, email jack@nlcp.co.uk.

Complaints

If you're unhappy with how your data has been handled, you can contact me directly, or make a complaint to the Information Commissioner's Office at ico.org.uk.

Contact

Jack Holland, North Liverpool Counselling & Psychotherapy
Email: jack@nlcp.co.uk
ICO registration: C1969461