Effective from 5th July 2026.

This privacy notice explains how I collect, use, store and protect your personal information as part of my therapy practice.

I have tried to keep this as clear and straightforward as possible, so you know what information I hold, why I hold it, and what your rights are.

Who I am

This website and therapy practice are operated by Tessa Williams Therapy, a sole trader based in Brighton & Hove, England.

For the purposes of UK data protection law, Tessa Williams is the data controller. This means I am responsible for deciding how personal information is collected, used and stored.

I am registered with the Information Commissioner’s Office and aim to handle personal information in line with UK data protection legislation, including UK GDPR.

If you have any questions about this privacy notice or how your information is handled, you can contact me at:

hello@tessawilliamstherapy.com

What information I collect

The information I collect depends on how you interact with me.

If you visit my website, some limited technical information may be collected automatically, such as your IP address, browser type, device information and pages visited. This may happen through my website hosting provider for basic security, functionality and maintenance.

If you contact me by email or make an enquiry about therapy, I collect:

• Your email address.
• Any information you include in your message.

If you book a free 20-minute call, I collect:

• Your name.
• Your phone number.
• Your email address.
• Your preferred session type.
• Your preferred time of day.
• Any information you include in your booking request.

If you begin therapy with me, I also collect:

• Your date of birth.
• Your home address.
• Emergency contact details.
• GP details.
• Relevant health or mental health information.
• Medication information, where relevant.
• Risk or safeguarding information, where relevant.
• Brief notes from our sessions.
• Payment records, such as dates and amounts paid.

I work with adults aged 18 and over.

I ask that you be mindful of what you choose to share by email or through any booking system, as these may not be fully secure forms of communication.

Why I collect and use information

I collect and use personal information so that I can:

• Respond to enquiries.
• Arrange and confirm appointments.
• Provide therapy safely and effectively.
• Keep appropriate records of our work together.
• Manage practical matters such as payment and scheduling.
• Meet professional, legal and insurance requirements.
• Respond to concerns, complaints or legal obligations, if needed.

I do not sell your personal information to third parties or use it for unrelated marketing.

Lawful bases for using your information

Under UK data protection law, I need a lawful basis for collecting and using personal information.

I usually rely on the following lawful bases:

Contract

I use some personal information so that I can provide therapy services, arrange appointments, manage payment, and fulfil the therapy agreement between us.

Legitimate interests

I may use personal information where it is necessary for the running of my therapy practice, responding to enquiries, keeping brief clinical records, and protecting the safety and wellbeing of clients and others.

Legal obligation

In some circumstances, I may need to use or share information to meet a legal requirement, such as where I am required to do so by law or where there are safeguarding concerns.

Consent

Where I rely on your consent, you have the right to withdraw that consent at any time.

Special category data

Some of the information I collect as part of therapy may be classed as special category data. This includes information about your health, mental health, and anything else you choose to share in therapy that falls into this category.

Special category data is given extra protection under UK data protection law. I use this information only where it is necessary for the provision of therapy, for safeguarding reasons, or where I am legally or professionally required to do so.

Website visitors and cookies

This website does not use cookies.

Some limited technical information may still be collected when you visit my website, such as your IP address, browser type, device information and pages visited. This may happen through my website hosting provider for basic security, functionality and maintenance.

I do not use website information to identify you personally unless you choose to contact me directly.

How I store your information

I store personal information securely and confidentially. This may include secure, password-protected digital systems and devices.

I take reasonable steps to protect information against loss, misuse, unauthorised access or disclosure.

Emails and digital communication are kept as secure as reasonably possible, but no method of electronic communication can be guaranteed to be completely secure.

How I communicate with you

I may contact you by email, phone or text message for practical matters relating to therapy, such as arranging appointments or responding to enquiries.

In some circumstances, I may use WhatsApp if other methods are not available or if this has been agreed between us. I ask that you are mindful of your own privacy when using email, text or messaging apps.

I do not use your contact details for unrelated marketing.

Confidentiality and supervision

Therapy is confidential, and I take your privacy seriously.

I attend regular clinical supervision as part of safe and ethical practice. In supervision, I may discuss aspects of our work, but where possible I do this in a way that does not identify you.

When information may be shared

There are some circumstances where I may need to share information. This may include:

• If there is a serious risk of harm to you or someone else.
• If there are safeguarding concerns.
• If I am required to do so by law.
• If information is needed by emergency services.
• If I need to contact your GP or another relevant service in relation to risk or safeguarding.
• If I need to seek professional or legal advice.
• If I am responding to a complaint or legal process.

Where possible, I would aim to discuss this with you first and seek your consent, unless doing so would not be safe or appropriate.

In the event that I am unexpectedly unable to continue practising, limited information may be shared with my appointed clinical executor so that clients can be contacted and appropriate arrangements can be made.

Third-party services

I may use trusted third-party services to support the running of my practice and website. These may include website hosting, email, booking systems, secure storage, or other administrative systems.

Where third-party services are used, I aim to make sure that information is handled securely and only for appropriate purposes.

How long I keep information

If you make an enquiry but do not go on to start therapy with me, I will only keep your information for as long as needed to respond to your enquiry and manage any follow-up.

If you become a client, I keep records for five years after therapy ends. This is in line with my professional and insurance requirements.

After this period, information will be securely deleted or destroyed.

Your rights

Under UK data protection law, you have rights in relation to your personal information. These include:

• The right to ask for a copy of the information I hold about you.
• The right to ask for inaccurate information to be corrected.
• The right to ask for information to be deleted, where this applies.
• The right to ask for the use of your information to be restricted, where this applies.
• The right to object to how your information is used, where this applies.
• The right to withdraw consent, where consent is the lawful basis being used.

Some rights may not apply in all circumstances, and there may be occasions where I am required to keep certain information for legal, professional or insurance reasons.

If you would like to make a request about your personal information, please contact me at:

hello@tessawilliamstherapy.com

I will respond to requests as soon as possible and within the required legal timeframe.

Concerns or complaints

If you have any concerns about how your personal information has been handled, please contact me in the first instance. I will take any concerns seriously and aim to respond clearly and promptly.

You can contact me at:

hello@tessawilliamstherapy.com

If you remain dissatisfied, you have the right to raise a complaint with the Information Commissioner’s Office:

Information Commissioner’s Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF.

0303 123 1113

www.ico.org.uk/make-a-complaint

Changes to this privacy notice

I may update this privacy notice from time to time. Any updated version will be posted on this page.