Jo Bailey Counselling & Psychotherapy

About Patient Services Clinical Workshops Fees

Privacy Policy

Last updated: 30 September 2026

Jo Bailey Counselling & Psychotherapy (“I”, “me”, “my”, “Jo Bailey”, or “the Practice”) respects your privacy and is committed to protecting your personal information.

This Privacy Policy explains how I collect, use, store and protect personal information when you visit this website, contact me, enquire about my services, attend a workshop or training session, or otherwise interact with my practice.

This policy applies to the website at https://www.jobaileycounsellingandpsychotherapy.co.uk/ and to personal information collected through the website.

1. Who is responsible for your information?

The data controller responsible for your personal information is:

Jo Bailey Counselling & Psychotherapy
Email Address: [email protected]
Telephone: 07553 096511

For privacy enquiries, please contact me using the contact details above.

2. What information do I collect?

Depending on how you interact with me, I may collect:

Information you provide directly

This may include:

  • your name;
  • email address;
  • telephone number;
  • information contained in your enquiries or messages;
  • information relating to appointments and consultations;
  • information required to provide psychotherapy, supervision, training or workshops;
  • payment and billing information;
  • information you provide when registering for a workshop or training session;
  • correspondence between you and me.

Health and wellbeing information

If you become a psychotherapy client, or if you provide information about your circumstances when making an enquiry, you may provide information concerning your physical or mental health, wellbeing, personal circumstances, treatment history or other sensitive information.

Health information is treated as special category personal data under UK data protection law and is subject to additional protections.

Information collected automatically

When you use the website, certain technical information may be collected automatically, such as:

  • IP address;
  • browser and device type;
  • operating system;
  • approximate location derived from technical information;
  • pages visited;
  • referring website;
  • date and time of visits;
  • information about how you interact with the website.

The information actually collected depends on the website hosting, analytics, cookie and security services currently in use.

3. How I use your information

I may use your personal information to:

  • respond to enquiries;
  • arrange an initial consultation;
  • provide psychotherapy and related services;
  • provide clinical or organisational supervision;
  • provide training and workshops;
  • administer bookings and appointments;
  • process payments and issue invoices;
  • communicate with you about services you have requested;
  • maintain appropriate professional and business records;
  • meet professional, legal and regulatory obligations;
  • maintain the security of the website and my systems;
  • respond to complaints or legal claims;
  • improve the website and services where appropriate;
  • prevent or detect fraud, misuse or security incidents.

I will only use your information for purposes that are lawful, fair and transparent. The ICO requires organisations to identify and document an appropriate lawful basis for processing personal data.

4. Lawful bases for processing

Depending on the circumstances, I may rely on one or more of the following lawful bases under UK GDPR:

Contract

I may process information where this is necessary to enter into or perform a contract with you, for example when providing paid services, processing bookings or administering an agreed service.

Steps taken at your request

I may process information necessary to respond to your enquiry or take steps at your request before entering into a contract.

Legal obligation

I may process information where necessary to comply with a legal or regulatory obligation.

Legitimate interests

I may process information where necessary for my legitimate interests, such as managing my practice, maintaining records, responding to enquiries, protecting my systems and dealing with complaints or legal matters, provided those interests are not overridden by your rights.

Consent

Where required, I may rely on your consent. Where consent is used, you may withdraw it at any time, although this will not affect processing that took place before withdrawal.

5. Health and other special category information

Information concerning your health, including mental health, is special category personal data and receives additional protection under UK GDPR.

Where I process health information in connection with providing psychotherapy or other health/social care services, I will rely on an applicable Article 9 condition alongside the relevant Article 6 lawful basis. Depending on the circumstances, this may include the health or social care condition under Article 9(2)(h), where the relevant requirements are satisfied.

Where explicit consent is required, I will obtain that consent in an appropriate manner.

Website enquiries: Please do not include detailed medical, mental-health or other highly sensitive information in the website contact form unless specifically requested. Where possible, please use the form simply to request contact or an initial conversation.

6. Confidentiality

Information shared with me in the course of psychotherapy and professional work will be treated confidentially, subject to applicable professional, legal and safeguarding requirements.

Confidentiality may need to be limited in circumstances where I have a legal or professional obligation to disclose information, for example where there is a serious and immediate risk of harm, where disclosure is required by law, or where disclosure is otherwise necessary to protect someone from serious harm.

The precise confidentiality arrangements applicable to psychotherapy clients are also governed by the separate therapeutic agreement/contract provided when services commence.

7. Who may receive your information?

I will not sell your personal information.

Where necessary, information may be shared with carefully selected third parties who help me operate my practice or provide services. These may include:

  • website hosting and technical service providers;
  • email providers;
  • booking or scheduling providers;
  • payment providers;
  • accounting or bookkeeping providers;
  • professional advisers;
  • insurers;
  • professional or regulatory bodies where applicable;
  • healthcare providers or other professionals where there is an appropriate lawful basis;
  • law enforcement, courts or other authorities where disclosure is legally required or permitted.

The specific providers used by the Practice may change from time to time.

Where another organisation processes personal information on my behalf, I will take appropriate steps to ensure that the information is handled securely and in accordance with applicable data protection law.

8. International transfers

Some service providers may process personal information outside the UK.

Where personal information is transferred outside the UK, I will ensure that an appropriate legal mechanism and safeguards are used where required by UK data protection law.

9. How long do I keep your information?

I will keep personal information only for as long as reasonably necessary for the purpose for which it was collected, taking account of legal, professional, regulatory, insurance and accounting requirements.

Different types of information may therefore be retained for different periods.

For example:

  • enquiry information may be retained for as long as reasonably necessary to deal with the enquiry and any related administrative matters;
  • client records will be retained in accordance with applicable professional, legal, regulatory and insurance requirements;
  • financial records will be retained for the period required by applicable tax and accounting rules;
  • workshop and training records may be retained for legitimate administrative and accounting purposes.

When information is no longer required, it will be securely deleted or anonymised where appropriate.

10. Keeping your information secure

I take reasonable and appropriate technical and organisational measures to protect personal information against accidental loss, unauthorised access, alteration, disclosure or destruction.

However, no method of transmitting information over the internet or storing information electronically can be guaranteed to be completely secure.

For this reason, please avoid sending highly sensitive information through ordinary website forms or unsecured email unless specifically requested.

11. Your data protection rights

Subject to applicable legal conditions and exemptions, you may have rights including:

  • the right to be informed about how your information is used;
  • the right to request access to personal information held about you;
  • the right to request correction of inaccurate information;
  • the right to request deletion of information in certain circumstances;
  • the right to request restriction of processing in certain circumstances;
  • the right to object to certain processing;
  • the right to data portability in certain circumstances;
  • the right to withdraw consent where processing is based on consent.

These rights are not absolute and certain legal or professional requirements may mean that information cannot immediately be deleted or processing stopped.

The ICO expects privacy information to explain matters such as the purposes of processing, lawful bases, recipients and relevant international transfers.

12. How to exercise your rights

To exercise a data protection right, please contact:

Email Address: [email protected]
Telephone: 07553 096511

I may need to verify your identity before responding to a request.

I will normally respond within the period required by applicable data protection law.

13. Complaints

If you have a concern about how I have handled your personal information, please contact me first so that I have an opportunity to address it.

You also have the right to complain to the UK’s data protection regulator:

Information Commissioner’s Office (ICO)

You can find information about making a complaint on the ICO website.

Information Commissioner’s Office

14. Changes to this Privacy Policy

I may update this Privacy Policy from time to time to reflect changes to the website, my services, technology, legal requirements or the way personal information is processed.

The latest version will be published on this website with the date of the most recent update.

15. Contact

If you have questions about this Privacy Policy or how your personal information is handled, please contact:

Jo Bailey Counselling & Psychotherapy
Email Address: [email protected]
Telephone: 07553 096511