Privacy Policy

Last updated: 10 June 2026

I am Dr. Leah Jameson, a UK-trained, HCPC-registered Counselling Psychologist providing online therapy to clients in the UK and worldwide. I am committed to protecting your privacy and handling your personal data in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. This policy explains what information I collect, why, and how it is protected.

What information I collect

• Contact details: your name, email address, and any information you choose to share when you contact me by email or book a session.
• Booking information: appointments are scheduled through Calendly, which processes the details you enter in line with its own privacy policy.
• Clinical records: brief, confidential notes of therapy sessions, kept securely as required by my professional body.
• Website analytics: this site uses Google Analytics to understand how visitors use it. This data is aggregated and does not personally identify you.

How I use your information

Your information is used only to provide and manage therapy services: responding to enquiries, scheduling and delivering sessions, maintaining clinical records, and meeting my legal and professional obligations. I will never sell your data or use it for third-party marketing.

Lawful basis

I process your data on the basis of contract (providing the therapy you have engaged me for), legitimate interests (responding to enquiries and managing my practice), and legal obligation (record-keeping required of HCPC-registered psychologists). Where data concerns your health, it is processed under the provision for health and care purposes with your explicit engagement in therapy.

Confidentiality

Everything you share in therapy is confidential. The rare exceptions, which I will always discuss with you wherever possible, are where there is a serious risk of harm to you or another person, or where disclosure is required by law. These limits are explained at the start of therapy.

How long I keep your data

Clinical records are retained in line with HCPC and professional guidance, typically for seven years after our last contact, and are then securely destroyed. Enquiry emails from people who do not become clients are deleted within a reasonable period.

International clients

I work with clients worldwide. Wherever you are located, your data is handled to the standards of the UK GDPR. Third-party services I use (such as Calendly, Google, and video-call providers) may process data outside the UK under their own safeguards.

Your rights

You have the right to access the personal data I hold about you, to request correction or deletion (subject to my professional record-keeping obligations), to object to or restrict processing, and to lodge a complaint with the Information Commissioner's Office (ICO) in the UK.

Contact

For any questions about this policy or your data, contact me at leah@csatherapist.com.