top of page

Privacy & Data Protection Notice

Last Updated: 2026

​

1. Overview & Data Controller

This Privacy Notice explains how Ali Quinn Therapy collects, uses, stores, and protects your personal information in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

​

Ali Quinn (MA, MBACP) is the Data Controller responsible for your personal data.

​

2. Information I Collect

I collect personal details that you voluntarily provide when making an inquiry, booking an initial consultation, or engaging in therapy sessions:

  • Contact Information: Name, email address, and phone number.

  • Inquiry Details: Any preliminary information you share via the website contact form, email, or initial phone call.

  • Session & Administrative Data: Brief, anonymised process notes, attendance records, and payment history.

 

3. How & Why I Use Your Information

Your data is used strictly for legitimate practice purposes, including:

  • Responding to initial inquiries and scheduling sessions.

  • Delivering professional, ethical psychotherapy and counselling services.

  • Practice administration, invoicing, and record-keeping.

​

Legal Basis for Processing: Under UK GDPR, the primary legal bases relied upon are:

  • Legitimate Interest: To respond to prospective client inquiries and manage administrative aspects of practice.

  • Contractual Necessity: To provide therapy services once we enter into a formal working agreement.

  • Consent: Explicit consent provided when submitting inquiry forms or initial contact.

 

4. Confidentiality & Data Sharing

I do not sell, rent, or share your personal data with third parties for marketing purposes.

 

Your personal details and session content remain strictly confidential, in alignment with the BACP Ethical Framework. The only exceptions to confidentiality occur:

  1. Safeguarding: If I have serious concerns regarding your safety or the safety of others.

  2. Legal Requirement: Where I am legally compelled to disclose information by a court of law.

  3. Clinical Supervision: Case details discussed in mandatory clinical supervision are completely anonymised to protect your identity.

 

Wherever possible, any step to break confidentiality will be discussed with you first.

 

5. Third-Party Services

Digital services used to run my practice securely include:

  • Wix: Website host and secure contact form provider.

  • Gmail: Encrypted email service for administrative communication.

  • Zoom: Secure, end-to-end encrypted platform for online therapy video calls.

 

6. Data Storage & Retention

  • Enquiries: Contact information and initial correspondence for individuals who do not proceed with therapy are securely deleted within 6 months.

  • Practice Records: Administrative data and anonymised process notes for ongoing or completed therapy are retained securely for a period required by professional insurance standards (typically 5–7 years following completion of work), after which they are permanently deleted/destroyed.

 

7. Your Rights Under UK GDPR

You have the following rights regarding your personal data:

  • Access: The right to request a copy of the personal data held about you.

  • Correction: The right to request correction of inaccurate or incomplete data.

  • Erasure: The right to request deletion of your personal data, subject to statutory or professional record-keeping obligations.

  • Restriction/Object: The right to restrict or object to certain processing of your data.

 

8. Questions & Complaints

If you have any questions about this Privacy Notice or wish to exercise your data rights, please contact me directly at aliquinntherapy@gmail.com.

If you feel your data has not been handled correctly, you also have the right to lodge a complaint with the Information Commissioner’s Office (ICO), the UK independent authority for data protection:

​

​

bottom of page