Privacy information
Privacy policy — draft
Draft for review before launch. This is not yet a complete privacy notice. Retention periods, data-processing arrangements and legal bases must be checked before publication.
Who is responsible for your information?
Relating Differently, operated by Montserrat (Mons), is responsible for handling personal information in connection with counselling enquiries and services. Contact: relatingdifferently@gmail.com.
What information is collected?
This may include contact details, appointment and payment information, counselling agreements, and confidential counselling notes where you become a client. Please do not include sensitive personal details in an initial email.
Why information is used
Information is used to respond to enquiries, arrange and deliver counselling, maintain appropriate records, and meet applicable professional and legal obligations. The lawful bases for each purpose, including any special-category data condition, will be documented in the final policy.
How information is protected
Client records are stored digitally using access-controlled Google Drive storage. Counselling notes use unique client reference numbers rather than names, with identifying information kept separately. Access is restricted. Further technical and contractual safeguards are being reviewed.
How long information is kept
The proposed retention period for adult counselling records is seven years after the final session, subject to confirmation against insurance and professional requirements. Enquiries that do not lead to counselling will have a shorter, separately defined retention period.
Confidentiality and your rights
Confidentiality has limited exceptions, including certain safeguarding or legal circumstances. Under UK data protection law you may have rights to access, correct or otherwise exercise control over your personal information, subject to applicable exceptions. You can contact me about your information and complain to the Information Commissioner's Office.
Before launch, this notice must also identify relevant service providers and international transfers, retention periods for each record type, legal bases, and complete rights information.