Privacy Policy, Data Protection Statement & Cookie Policy

Last Updated: August 2026

1. Introduction

Welcome to the privacy policy for Jayne Street/Jayne Louise Street Ltd. I am committed to protecting and respecting your privacy. This document outlines how I collect, store, share, and protect your personal data when you interact with my website, inquire about services, or engage in individual psychotherapy, EMDR, couples therapy, or clinical supervision.

By using my services or this website, you agree to the collection and use of information in accordance with this policy.

2. Contact Details & Data Controller

For the purposes of the UK General Data Protection Regulation (UK GDPR), I am the Data Controller for this practice.

• Full Name: Jayne Louise Street

• Practice Name: Psychotherapy & Counselling and Clinical Supervision. Jayne Louise Street Ltd.

• Email Address: streetjayne@gmail.com

• Phone Number: +44 (0) 7908 216 940

• ICO Registration Number: ZB150705

3. The Types of Personal Data Collected

I may collect and process the following categories of information:

A. Personal Information (Identifiable Data)

• Full name, date of birth, and gender.

• Contact information (home address, email address, phone number).

• Emergency contact/Next of kin details.

• GP practice name, address, and contact details.

• Payment, billing address, and invoice information.

B. Special Category Data (Sensitive Health Data)

Because I provide mental health services, I collect data concerning your health. This includes:

• Psychological, psychiatric, and relevant medical history.

• Information regarding prescribed medications.

• Brief clinical case notes written after therapy or supervision sessions.

• Information regarding lifestyle, relationships, and presenting challenges discussed during sessions.

C. Technical & Website Data

• IP addresses, browser types, and cookies via your interaction with this website (governed by my Cookie Policy).

4. Lawful Basis for Processing Your Information

Under the UK GDPR, I must have a specific lawful basis to hold and process your personal and sensitive data. I rely on the following bases:

• Contract (Article 6(1)(b)): Processing is necessary to fulfill our therapeutic or supervision agreement, including scheduling, communication, and conducting sessions.

• Legitimate Interests (Article 6(1)(f)): Processing is necessary for the smooth and safe administration of my private practice, including financial billing and clinical record-keeping.

• Special Category Data Condition (Article 9(2)(h)): I process your health data specifically for the provision of health or social care treatment (psychotherapy, relationship therapy, and EMDR).

5. How Your Data is Collected

Your data is collected when you:

• Complete the contact form on this website.

• Email or call me directly to inquire about therapy or supervision.

• Attend an initial consultation or subsequent clinical sessions.

• Pay for services via bank transfer or integrated secure billing systems.

6. How Your Data is Stored & Secured

I take data security extremely seriously and implement high-level physical and digital safeguards:

• Digital Records: Email communications, digital clinical records, and intake documentation are stored on password-protected, encrypted cloud platforms that comply with UK GDPR standards.

• Physical Records: Any handwritten notes or printed documents are kept securely in a locked filing cabinet accessible only by me.

• Website Security: This website operates using an SSL certificate (https://) to encrypt data submitted via online forms.

7. Data Retention: How Long I Keep Your Information

• Clinical Therapy & Couples Therapy Notes: In line with professional insurance requirements and standard UK psychotherapeutic practice, full client files and session summaries are kept for 7 years from the date your therapy ends. After this period, they are permanently and securely deleted or shredded.

• Supervision Records: Supervisee records are held for 7 years post-contract termination.

• Unaccepted Inquiries: If you get in touch but do not proceed to start therapy, your contact form details, emails, and texts will be deleted after 6 months

8. Who Your Data is Shared With (Confidentiality & Exceptions)

Your information is strictly confidential and will never be sold or used for marketing purposes. However, it may be shared under the following limited conditions:

• Clinical Supervision: To comply with UKCP and EMDR Association UK standards, I regularly discuss my clinical work with a qualified supervisor. Your identity is kept fully anonymous during these professional consultations.

• Risk of Harm & Safeguarding: If I believe there is an imminent and serious risk of harm to yourself or to others, I may be legally and ethically required to breach confidentiality to contact your GP, emergency services, or local safeguarding authorities. I will always endeavor to discuss this with you first where possible.

• Legal Obligation: I may disclose information if required to do so by law, a court order, or a valid request from a statutory regulatory body.

• Clinical Will: In the event of my sudden incapacitation or death, a designated professional executor (a qualified peer therapist bound by identical confidentiality rules) will be granted secure access to your basic contact details to notify you and arrange continuity of care.

9. Your Legal Rights Under UK GDPR

You have specific rights regarding your personal information:

• The Right of Access: You can request a copy of the personal information and clinical notes I hold about you. (This is known as a Subject Access Request).

• The Right to Rectification: You can request that I correct any inaccurate or incomplete information.

• The Right to Erasure: You can request that I delete your personal data. Please note that this right is not absolute and does not override my legal and insurance requirements to retain clinical medical records.

• The Right to Restrict Processing: You can object to or ask me to limit how your data is processed.

To exercise any of these rights, please contact me directly at streetjayne@gmail.com

10. Complaints

If you have any concerns regarding how I handle your data, please raise them with me first so I can address them. If you remain unsatisfied, you have the right to lodge a formal complaint with the UK data regulator:

• Information Commissioner’s Office (ICO)

• Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF

• Website: https://ico.org.uk