Last updated: June 2026
Who I Am
I am Michelle Gale, a counsellor and psychotherapist in private practice trading as Michelle Gale Therapy.
For the purposes of the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018, I am the Data Controller responsible for the personal information you provide.
Contact Details
Michelle Gale Therapy
Email: info@michellegaletherapy.co.uk
Telephone: 07729 980125
Website: www.michellegaletherapy.co.uk
ICO Registration Number: [ZB592965]
If you have any questions about this Privacy Notice or how your information is handled, please contact me using the details above.
The Information I Collect
I may collect and process the following personal information:
- Name
- Postal address
- Email address
- Telephone number
- Date of birth
- Emergency contact details
- GP details where appropriate
- Information provided during enquiries
- Appointment and attendance information
- Payment records
- Information disclosed during counselling and psychotherapy sessions
Some of the information shared during therapy may be classified as Special Category Data under UK GDPR. This may include information relating to physical or mental health, emotional wellbeing, family circumstances, ethnicity, religious beliefs, sexual orientation or other sensitive personal matters where relevant to the therapeutic work.
How I Collect Information
Information may be collected when you:
- Complete a contact form on my website
- Contact me by email, telephone or text message
- Arrange an initial consultation
- Complete client registration paperwork
- Attend counselling sessions
- Make payments for services
Why I Process Your Information
I process personal information in order to:
- Respond to enquiries
- Assess whether I am the appropriate therapist for your needs
- Provide counselling and psychotherapy services
- Maintain professional records
- Manage appointments and administration
- Meet legal, ethical and professional obligations
- Protect clients and others where safeguarding concerns arise
Lawful Bases for Processing
Under UK GDPR, I rely on the following lawful bases:
Legitimate Interests
To respond to enquiries, administer my practice and maintain appropriate professional records.
Contract
To provide counselling and psychotherapy services requested by you.
Legal Obligation
Where I am required to comply with legal, regulatory, safeguarding, insurance or taxation obligations.
Special Category Data
Therapy work often involves processing sensitive personal information relating to health and wellbeing.
This information is processed in accordance with Article 9 UK GDPR for the provision of counselling and psychotherapy services and for the establishment, exercise or defence of legal claims where necessary.
Confidentiality
Everything discussed within counselling sessions is treated as confidential.
However, there are circumstances in which confidentiality may need to be broken. These include:
- Where there is a serious risk of harm to yourself or another person
- Safeguarding concerns involving a child or vulnerable adult
- Where disclosure is required by law or court order
- Where information relates to serious crime, terrorism or money laundering
Where appropriate and safe to do so, I will endeavour to discuss any necessary disclosure with you beforehand.
Clinical Supervision
As required by the BACP Ethical Framework, I undertake regular professional supervision.
The purpose of supervision is to support safe, ethical and effective practice.
Client work may be discussed within supervision. Wherever possible, identifying information is removed and information is shared only to the extent necessary for professional support and client welfare.
Supervisors are also bound by professional confidentiality and data protection obligations.
How Your Information Is Stored
I take reasonable steps to ensure personal information is stored securely.
These measures may include:
- Password-protected devices
- Secure email systems
- Secure practice management software
- Restricted access to client records
- Locked storage for any paper records
No method of electronic transmission or storage can be guaranteed to be completely secure. However, appropriate safeguards are in place to minimise risks.
Third-Party Service Providers
To support the delivery of my services, I use trusted third-party providers who may process personal information on my behalf.
These include:
- Google Workspace and Google Meet for email communications and online sessions
- Kiku Practice Management Software for appointment scheduling, client administration and secure clinical record keeping
- Website hosting providers and technical support services
- Payment providers where applicable
- Jetpack (Automattic) for website statistics and performance monitoring
These organisations are required to handle personal information securely and in accordance with applicable data protection laws.
International Transfers
Some service providers I use may store or process information outside the United Kingdom.
Where this occurs, appropriate safeguards are in place to ensure personal information remains protected in accordance with UK GDPR requirements.
How Long Information Is Retained
Client records are normally retained for seven years following the end of therapy and are then securely destroyed unless there is a legal, safeguarding or insurance-related reason to retain them for longer.
Information provided through initial enquiries where therapy does not commence will normally be deleted within twelve months.
Your Rights
Under UK GDPR, you have the right to:
- Access your personal information
- Request correction of inaccurate information
- Request erasure of information in certain circumstances
- Request restriction of processing in certain circumstances
- Object to processing based on legitimate interests
- Request transfer of your personal information where applicable
- Withdraw consent where consent is relied upon
Please note that some rights may be limited where information must be retained to meet legal, professional, insurance or safeguarding obligations.
Requests relating to your personal information will normally be responded to within one calendar month.
Website Contact Form
If you submit information through the contact form on this website, the information you provide will be used to respond to your enquiry and assess whether I may be able to offer appropriate services.
Please avoid including unnecessary sensitive personal information when making an initial enquiry.
Cookies
This website uses cookies and similar technologies to help the website function effectively and to understand how visitors use the site.
I use Jetpack services provided by Automattic to collect anonymous website statistics, such as the number of visitors to the site and the pages viewed. This information helps me understand how the website is being used and improve its performance.
These statistics do not normally identify individual visitors.
Where non-essential cookies are used, consent will be requested through the website’s cookie banner before such cookies are placed on your device.
You can control and delete cookies through your browser settings at any time, although doing so may affect the functionality of some parts of the website.
Complaints
If you have any concerns about how your personal information is collected, stored or processed, please contact me in the first instance so that I have the opportunity to address your concerns.
Michelle Gale Therapy
Email: info@michellegaletherapy.co.uk
I aim to acknowledge complaints promptly and respond as fully as possible within 30 days.
You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO) if you believe your personal information has been handled unlawfully or your data protection rights have been infringed.
Information Commissioner’s Office
Website: https://ico.org.uk
Telephone: 0303 123 1113
If your concern relates to my professional conduct as a therapist, information about the BACP Professional Conduct Procedure can be found on the BACP website.
Changes to This Privacy Notice
This Privacy Notice may be updated from time to time to reflect changes in legal requirements, professional guidance or business practices.
The most recent version will always be available on this website.