Privacy Policy

Blooming Therapy
Online Counselling and Clinical Supervision
Website: www.bloomingtherapy.co.uk
Email: sara@bloomingtherapy.co.uk

Last updated: June 2026

Blooming Therapy is owned and operated by Sara Reynolds. Sara Reynolds/Blooming Therapy is the Data Controller for the personal information collected through this website and through counselling or supervision services.

Blooming Therapy is registered with the Information Commissioner’s Office, also known as the ICO.

ICO Registration Number: ZC178557

This Privacy Policy explains how Blooming Therapy collects, uses, stores and protects your personal information in line with UK data protection law, including the UK GDPR, the Data Protection Act 2018, and relevant updates under the Data Use and Access Act 2025.

Your privacy matters. I aim to handle your personal information with care, respect and transparency. I only collect information that is needed to respond to enquiries, provide counselling or supervision services, manage appointments, meet professional responsibilities, and keep appropriate records.

Information I may collect

Depending on how you contact me or work with me, I may collect some of the following information:

  • your name

  • email address

  • telephone number

  • address or general location

  • emergency contact details, where appropriate

  • GP details, where appropriate

  • information you choose to share when making an enquiry

  • information shared during counselling, supervision, assessment or consultation

  • brief counselling or supervision notes

  • appointment records

  • payment information and invoices

  • relevant correspondence between us

Counselling and supervision may involve personal, emotional, psychological or health-related information. Some of this may be classed as special category data under UK GDPR. This means it is sensitive information and is treated with extra care.

Website information

When you visit this website, some information may be collected automatically. This may include:

  • your IP address

  • browser type

  • device information

  • pages visited

  • how you found the website

  • cookies or similar technologies

This information helps the website to work properly, supports website security, and helps me understand how the website is being used.

You can usually manage or disable cookies through your browser settings.

Why I collect your information

I collect and use personal information to:

  • respond to enquiries

  • arrange appointments

  • provide counselling or clinical supervision

  • keep appropriate professional records

  • manage payments and invoices

  • communicate with you about appointments or services

  • meet legal, ethical, insurance and professional obligations

  • safeguard you or others where there is a serious risk of harm

  • maintain the security and functioning of the website

Lawful basis for processing personal information

Under UK GDPR, I must have a lawful reason for collecting and using your personal information.

The lawful bases I may rely on include:

Contract
To provide counselling, supervision or related services you have requested.

Legitimate interests
To respond to enquiries, manage my practice, keep appropriate records, and run the website safely and effectively.

Legal obligation
Where I am required to keep records or share information by law.

Vital interests
Where it may be necessary to use or share information to protect someone’s life or safety.

For special category data, such as health, emotional wellbeing or therapeutic information, I may rely on:

Explicit consent
Where you have chosen to share this information as part of counselling, supervision or an enquiry.

Provision of health or social care
Where processing is necessary for providing confidential therapeutic support.

Safeguarding or legal claims
Where information may need to be used or shared to protect someone from serious harm, comply with legal duties, or respond to a legal process.

Confidentiality

Counselling and supervision are confidential services. Information shared with me is treated with care and respect.

There are some limits to confidentiality. I may need to share information if:

  • there is a serious risk of harm to you or another person

  • there is a safeguarding concern involving a child or vulnerable adult

  • I am required to do so by law or court order

  • there is a disclosure relating to terrorism, money laundering or another serious legal matter

  • I need to seek professional or clinical supervision, in which case identifying details are kept to a minimum wherever possible

Where possible and appropriate, I would aim to discuss any need to share information with you first.

Clinical supervision

As part of safe, ethical and professional practice, I may discuss aspects of client work in confidential clinical supervision.

When discussing client work in supervision, I avoid using full names or unnecessary identifying details wherever possible. Supervisors are also bound by confidentiality.

For supervisees, I may keep records relating to supervision sessions, professional development, attendance, themes discussed, and any relevant ethical or safeguarding issues.

How your information is stored

Your personal information is stored securely using appropriate electronic and/or paper-based systems.

Reasonable steps are taken to protect your information from loss, misuse, unauthorised access, disclosure or alteration.

This may include password protection, secure devices, secure email systems, locked storage where relevant, and limiting access to your information.

No method of electronic communication or internet transmission can be guaranteed to be completely secure, but I take reasonable steps to protect your data.

How long information is kept

I keep personal information only for as long as necessary.

Counselling and supervision records are usually kept for up to 7 years after the work ends, in line with professional, insurance and legal considerations.

Financial records may be kept for up to 6 years for tax and accounting purposes.

Enquiry information may be deleted sooner if you do not go ahead with services.

After the relevant retention period, information will be securely deleted or destroyed.

Sharing your information

I do not sell your personal information.

Your information may only be shared where necessary, such as with:

  • professional or clinical supervisors

  • secure email, website, booking, video call or payment providers

  • accountants or professional advisers, where required

  • insurers, where relevant

  • safeguarding agencies, emergency services, courts, or legal bodies where required by law or serious risk

Any third-party providers used are expected to handle data securely and in line with data protection requirements.

Online counselling and supervision

Online counselling and supervision sessions may take place using secure video platforms, such as Zoom or another agreed platform.

You are responsible for ensuring that you attend online sessions from a private and safe space, where you cannot be overheard.

I will also aim to provide sessions from a private and confidential setting.

Children and young people

Blooming Therapy’s website and services are mainly aimed at adults, counsellors, supervision clients, and educational professionals.

Where services involve children or young people, personal information is handled with particular care. Information will only be collected where needed to provide a safe and appropriate service, and consideration will be given to the child or young person’s age, understanding, privacy and safeguarding needs.

Where appropriate, parents, carers or relevant professionals may be involved, while still respecting the young person’s confidentiality and rights.

Your rights

Under UK data protection law, you have rights over your personal information. These include:

  • the right to be informed about how your data is used

  • the right to access the personal data held about you

  • the right to ask for inaccurate information to be corrected

  • the right to ask for information to be deleted in certain circumstances

  • the right to restrict or object to processing in certain circumstances

  • the right to data portability in certain situations

  • the right to withdraw consent where consent is being relied upon

There may be some situations where I cannot fully meet a request, for example where I have a legal, safeguarding, professional or insurance obligation to keep certain records.

To make a request about your personal data, please contact:

sara@bloomingtherapy.co.uk

Data protection complaints

If you have any concerns about how your personal information is collected, used, stored or shared, please contact me first so I can try to resolve this with you.

You can contact me by email at:

sara@bloomingtherapy.co.uk

I will acknowledge data protection complaints within 30 days and aim to respond without undue delay.

If you remain unhappy with how your personal information has been handled, you have the right to complain to the Information Commissioner’s Office, which is the UK regulator for data protection.

ICO website: www.ico.org.uk

Links to other websites

This website may contain links to other websites. Blooming Therapy is not responsible for the privacy practices or content of external websites.

When you leave this website, you may wish to read the privacy policy of any other website you visit.

Changes to this Privacy Policy

This Privacy Policy may be updated from time to time to reflect changes in services, legal requirements or professional practice.

Please check this page occasionally to make sure you are happy with any updates.

Contact

If you have any questions about this Privacy Policy or how your personal information is handled, please contact:

Sara Reynolds
Blooming Therapy
Email: sara@bloomingtherapy.co.uk