PRIVACY POLICY

How I collect, use and protect your personal data

This notice explains how I handle personal data when you contact me or work with me as a client. It is written in line with UK GDPR and the Data Protection Act 2018, and in line with the confidentiality requirements of the BACP Ethical Framework and COSRT Code of Ethics and Practice.

1. Who is responsible for your data

Therapy with Monica/ Monica Chiorascu is the data controller for the personal data described in this notice. I am registered with the Information Commissioner's Office (ICO), registration number ZC086825.

2. What data I collect

•      Contact details: name, address, phone number, email address.

•      Health and personal information you share during assessment and sessions, including sensitive ('special category') data about your physical and mental health, and your sex life or sexual orientation where relevant to our work.

•      GP and medical contact details, where you provide these.

•      Session notes and, where used, formulation and treatment planning records.

•      Fee, payment and appointment records.

•      Any correspondence between us, including emails or messages.

3. Why I collect it, and my legal basis

I collect and use your data to provide you with therapy safely and professionally, and to meet my legal and professional obligations. My legal bases under UK GDPR are:

•      Contract: processing necessary to deliver the therapeutic service you have engaged me for.

•      Consent: for special category data (health, sex life data), I rely on your explicit consent, given as part of your Therapeutic Agreement.

•      Legal obligation: where I am required to disclose information by law (see Section 5).

•      Legitimate interests: for basic administrative purposes, such as appointment reminders.

4. How your data is stored and protected

•      Session notes and records are stored digitally using encrypted, password-protected systems.

•      Video/telephone sessions use Zoho Meeting; details of Zoho's data processing arrangements are set out in your Online & Telephone Working Agreement.

•      I take reasonable technical and organisational measures to protect your data against unauthorised access, loss, or disclosure.

•      Records are retained for [retention period, typically 7 years from the end of therapy, or longer where required by insurance or legal guidance] and then securely destroyed.

5. Who I share your data with

I do not share identifiable information about you without your consent, except in the following circumstances:

•      Clinical supervision: I discuss my client work in supervision, as required by BACP and COSRT, but do not share identifying details.

•      Legal or safeguarding requirements: where I am required by law or believe there is a serious risk of harm to you or others (see your Therapeutic Agreement for full detail).

•      Professional services: my insurer, accountant, or professional body, only where necessary and with appropriate confidentiality safeguards, such as in the event of a complaint or claim.

•      GP or other health professionals: only with your explicit, separate consent.

•      Service providers (data processors): including Zoho, for scheduling and video-call delivery, under their own data protection terms.

I do not sell or share your data for marketing purposes, and I do not use general-purpose AI tools to process identifiable client material.

6. Your rights

Under UK GDPR, you have the right to:

•      Access the personal data I hold about you.

•      Ask me to correct inaccurate data.

•      Ask me to erase your data, in certain circumstances (this may be limited by my professional obligation to retain records for a minimum period).

•      Restrict or object to certain processing.

•      Request a copy of your data in a portable format, where applicable.

•      Withdraw consent at any time, where processing is based on consent.

•      Complain to the Information Commissioner's Office (ico.org.uk) if you believe your data has been mishandled.

7. Contacting me about your data

To exercise any of these rights, or to ask a question about how your data is handled, please contact me at 07895053117 I hello@therapywithmonica.com. I will respond within one calendar month.

8. Changes to this notice

I review this notice periodically to keep it accurate and up to date with current data protection law and professional guidance. The most recent version is always available on request.

This notice is written with reference to UK GDPR, the Data Protection Act 2018, the BACP Ethical Framework for the Counselling Professions, and the COSRT Code of Ethics and Practice. Last reviewed: 13.08.2026.