Privacy Policy

This website is operated by Jack Gourlay.

I am committed to protecting your privacy and handling your personal information in accordance with UK data protection law, including the UK General Data Protection Regulation (UK GDPR).

Information collected

If you contact me by phone, email, or use the online booking system, I may collect:

  • First name and last name

  • Email address

  • Phone number

  • Any information you choose to share in your message

If we begin working together, I will collect further information relevant to providing counselling services. This is discussed in more detail in a separate counselling agreement.

Online booking

This website uses Squarespace Scheduling (Acuity) to allow you to arrange an initial Zoom call.

When you book a call, your contact details are processed securely through Squarespace. Squarespace acts as a data processor and handles information in accordance with its own privacy policy.

I only use the information you provide to arrange and manage appointments.

How your information is used

Your information is used to:

  • Respond to enquiries

  • Arrange and provide counselling sessions

  • Maintain clinical records

  • Meet legal and professional obligations

I do not use your information for marketing purposes.

Confidentiality

All client work is confidential and conducted in accordance with the ethical framework of the British Association for Counselling and Psychotherapy (BACP).

I undertake regular clinical supervision. In supervision, client work may be discussed in an anonymised way to support safe and ethical practice.

Lawful basis for processing

The lawful basis for holding and using your personal information is:

  • Legitimate interest (for responding to enquiries)

  • Contract (where we agree to work together)

  • Legal obligation (where required by law)

Health-related information is processed under Article 9(2)(h) of the UK GDPR, relating to the provision of health care.

Data storage and security

Electronic records are stored securely and password protected.

Reasonable steps are taken to protect your information from loss, misuse, or unauthorised access.

Data retention

Enquiry information that does not lead to ongoing work is deleted within a reasonable period.

Client records are retained in line with professional and insurance requirements, after which they are securely destroyed.

Your rights

Under UK data protection law, you have the right to:

  • Request access to your personal data

  • Request correction of inaccurate data

  • Request erasure in certain circumstances

  • Restrict or object to processing where applicable

You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO).

Contact

If you have any questions about this Privacy Policy or how your information is handled, please contact:

Jack Gourlay
jackgourlaytherapy@gmail.com
07837 444514