Privacy Notice: Catherine Mumford Counselling

Who I am

I'm Catherine Mumford, counsellor, trading as Catherine Mumford Counselling (cmumfordcounselling@gmail.com). I'm the data controller and registered with the ICO (ref: ZC264759).

What I collect

I collect your contact details, your emergency contact and, if needed, your GP's details. I also keep your assessment form, my session notes (which may include health information you share with me), payment records and emails about practical matters.

Most of this comes from you. If I get information from someone else, such as a GP or parent or guardian, I'll tell you. I need this information to provide counselling.

Why I use it

To provide counselling, arrange sessions, and meet legal and professional obligations. My legal basis is contract, and for health information, providing health or social care (UK GDPR Article 9(2)(h)).

Confidentiality

I only share information:

If you're under 18, I'll explain this in a way you understand. I may involve a parent or guardian where needed to keep you safe or where the law requires.

Who else handles your data

I use Google (email, online storage, google forms and Google Meet for online sessions). Google may process data outside the UK, with appropriate safeguards.

Storage and retention

Records are kept securely for 5 years after our work ends (longer if needed for safeguarding), then securely deleted or destroyed. Payment records are kept for as long as tax law requires.

Your rights

You can ask to see, correct or delete your data, or restrict or object to its use. I may not be able to delete records I am legally or professionally required to keep. You can complain to the ICO (ico.org.uk, 0303 123 1113).

Questions or requests: cmumfordcounselling@gmail.com. I will notify you of any changes to this notice.

Last updated: 18 October 2026