This notice explains what personal information I hold about you, how I use it, and what rights you have in relation to it. I want to be clear about both your legal rights and the practical detail of how I handle your information, so I have set these out separately below.
Part One: Your data protection rights
I process personal data about you in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. I am registered as a Data Controller with the Information Commissioner's Office under registration number ZA675968 and registration name Brighton Therapy Partnership Ltd, under which I operate.
Under UK data protection law, you have the following rights in relation to your personal data:
• Right of access: you can request a copy of the personal data I hold about you.
• Right to rectification: you can ask me to correct any inaccurate information.
• Right to erasure: in certain circumstances, you can ask me to delete your data.
• Right to restriction: you can ask me to restrict how I use your data while a concern is being investigated.
• Right to data portability: where processing is based on consent or contract, you can ask for your data in a portable format.
• Right to object: you can object to processing carried out on the basis of legitimate interests.
Data protection complaints
If you have a concern about how your personal data has been handled, for example a request to access or delete your records that was not dealt with to your satisfaction, or a concern about whether your information was shared appropriately or stored securely, please raise it with me directly in the first instance.
Please note that this covers concerns about data handling only, not about the therapeutic relationship or professional conduct. Concerns of that nature are a matter for my professional body, BACP (bacp.co.uk).
To raise a data protection concern, please contact me at shelleyholland@hotmail.com. I will acknowledge your concern within 30 days and respond as promptly as possible. If you remain dissatisfied, you have the right to raise a complaint with the Information Commissioner's Office (ICO) at ico.org.uk or on 0303 123 1113.
Part Two: How I work with your information
I take the security of your personal information very seriously. The information I hold about you, and the way I handle it, is specific to my practice and is set out below.
I hold the following personal information relating to you:
• Name, date of birth, address, telephone number, email address, GP details
I hold this information to enable me to undertake and perform my obligations and duties to you in accordance with my role, and to communicate with you during the course of our work together.
This information is held both digitally, on a password protected cloud storage service, and as a printed paper record kept in a locked filing cabinet. It is retained whilst our work together is current and destroyed five years from the date our work ends.
I also keep brief handwritten process notes, which I use to reflect on our sessions in supervision. These are destroyed once they have served this purpose.
In some circumstances I may take additional brief notes, for example to support continuity of care during a period of risk or crisis. These are minimal, kept securely, and destroyed once they are no longer needed.
Sharing your information with third parties
I do not share your information with any third parties except in the following situations:
• I may share your information with professionals or others at your request.
• I may share your information with relevant professionals or authorities if I believe that you or another person is at risk of serious harm.
• I may share your information where required to do so by law.
• In the above circumstances I will always endeavour to obtain your specific consent where possible.
• I will share your name and contact details with my clinical executor so they may contact you in the event of my death or incapacity.
• I will share your name and details of bank transfer payments with my administrator to assist with the smooth operation of my practice.
This notice forms part of my contract with you.
Updated June 2026