Privacy notice

Who I am

This privacy notice explains how I, Lindsey Thurlow-Gondard, collect, use and protect your personal information. I am the data controller for the information you share with me. You can contact me about anything in this notice at lindseythurlowgondard@gmail.com.

What information I collect

• Contact details you give me, such as your name, email address and phone number.

• Information you share when you get in touch, for example about why you are looking for therapy.

• If we work together: brief session notes, an emergency contact and a GP contact, and information about your health and wellbeing that you share in therapy.

• Notes from any contact or session with you, including initial assessments.

Why I use it

I use your information to respond to your enquiry, to arrange and provide therapy, and to meet my professional and legal obligations. Information about your health is treated as special category data and is used only for the purpose of providing therapy.

How I keep it safe

Handwritten notes, notebooks and any printed emails are kept in a locked cabinet. Digital records are password protected and encrypted. Session notes are kept separately from any information that identifies you, and clients are only ever identified in them by their first name.

Who I share it with

Your information is confidential. I discuss my work in clinical supervision, as required by the BACP, without sharing details that would identify you. I would only share identifiable information without your consent where the law requires it, or where I believe you or someone else is at serious risk of harm. Where possible, I would discuss this with you first.

How long I keep it

There is no legal requirement in the UK for private practitioners to keep notes for a set period, and no simple answer to how long therapists should keep them. I keep session notes for six years after our work ends, and then destroy them securely. Records of enquiries that do not lead to therapy are kept for six months, after which any documents are shredded and digital records deleted.

Your rights

You have the right to see the information I hold about you, to ask me to correct it, and in some circumstances to ask me to delete it or restrict how I use it. To make a request, email me and I will respond within one month.

Complaints

If you are unhappy with how I have handled your information, please contact me first. If you are in the UK, you can also complain to the Information Commissioner’s Office (ico.org.uk), or elsewhere to the equivalent authority in your own country.

This website

This website is hosted by Wix.com, which uses cookies that are needed for the site to work and to keep it secure. For details, see the Wix cookie policy.

Last updated: 11 November 2026