Policies

Privacy Policy
Last updated: [18/06/2026]

This Privacy Policy explains how I collect, use, store and protect personal data in accordance with the UK GDPR and the Data Protection Act 2018.

Who I am

I am Hanna Bohrisch, trading as Bohrisch Counselling, a counselling practitioner based in Ealing W5. I am a BACP Accredited Member and hold a BA (Hons) in Person-Centred Counselling.

If you have any questions about this Privacy Policy or the personal data I hold about you, please contact me at:

Email: [insert email]
Telephone: [insert phone]
Address: [insert business address if you want it shown]

What information I collect

I may collect and process the following personal data:

Your name.
Your contact details, such as email address, telephone number and address.
Appointment and administrative information.
Information you choose to share in emails, contact forms, telephone calls or counselling sessions.
Brief session notes, where necessary.
Payment or invoicing information.
Limited website data needed for the website to function properly.

I do not collect more information than is needed for counselling, administration, and legal or professional obligations.

How I use your information

I use your personal data to:

Respond to enquiries.
Arrange, manage and cancel appointments.
Provide counselling services.
Handle fees, invoicing and administration.
Keep professional records.
Meet legal, insurance and professional obligations.
Deal with complaints, safeguarding concerns or emergencies where necessary.

Lawful basis

I rely on one or more of the following lawful bases, depending on the situation:

Consent.
Performance of a contract.
Legal obligation.
Legitimate interests.
Vital interests, where necessary.

Where I process special category data, such as information about your health or mental wellbeing, I only do so where UK data protection law allows it and where an additional lawful condition applies.

Confidentiality

Everything discussed in counselling is treated as confidential. I will not normally share information without your consent.

Confidentiality may be limited where I believe there is a serious and immediate risk of harm to you or another person, where safeguarding concerns arise, where I am required to do so by law, or where disclosure is otherwise legally or ethically justified.

Where possible, I will discuss any possible disclosure with you first.

Supervision

As part of my professional practice, I receive regular supervision. This helps me reflect on my work and maintain good standards of practice.

I may discuss aspects of my work in supervision, but I will keep your identity anonymous wherever possible. Any person receiving identifiable information in the context of supervision is expected to treat it confidentially. This is consistent with BACP guidance on confidentiality and supervision.

Record keeping

I may keep brief notes about sessions where necessary. Records are stored securely in a password-protected system and/or through Practicewize, or in a locked cabinet if paper records are used.

I keep records only for as long as necessary for counselling, administration, legal, insurance and professional purposes, and then destroy them securely.

Sharing your information

I may share your information with:

My supervisor.
Administrative, IT or email service providers.
Practicewize, where it is used to manage records or administration.
Professional advisers, insurers or legal advisers.
Emergency services, GPs or safeguarding authorities if necessary.
The Information Commissioner’s Office or another authority where required by law.

I only share the minimum information necessary and do not sell your data.

Data retention

I keep personal data only for as long as necessary for the purposes for which it was collected.

My usual retention periods are:

Enquiries and contact-form messages: 7 years.
Client records and counselling notes: 7 years.

If I need to keep different records for different lengths of time, I will do so in line with legal, professional and insurance requirements.

Your rights

You have rights in relation to your personal data, including the right to:

Access the information I hold about you.
Ask for inaccurate information to be corrected.
Ask for information to be erased in certain circumstances.
Ask for processing to be restricted in certain circumstances.
Object to certain processing.
Withdraw consent, where consent is the lawful basis.
Complain to the Information Commissioner’s Office.

To exercise any of these rights, please contact me using the details above.

Cookies

This website uses only strictly necessary cookies. These cookies are needed for the website to function and do not require consent. This is consistent with ICO guidance that strictly necessary cookies do not need consent, unlike cookies used for analytics or convenience.

Links to other websites

This website may contain links to external websites. I am not responsible for the privacy practices or content of those websites, and you should read their own privacy notices before using them.

Complaints

If you are unhappy with how I have handled your personal data, please contact me first so I can try to resolve the issue.

You also have the right to complain to the Information Commissioner’s Office (ICO):

Information Commissioner’s Office
Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF

Telephone: 0303 123 1113
Website: ICO complaints

Cookie Policy

This website uses cookies. Cookies are small text files stored on your device when you visit a website.

Cookies we use

We use only strictly necessary cookies, which are required for the website to function.

We do not use analytics cookies, advertising cookies, or other non-essential cookies.

Consent

Because we use only strictly necessary cookies, no cookie consent banner is required for non-essential cookies.

Managing cookies

You can still control cookies through your browser settings if you wish to delete or block them.

Website Terms

Website Terms of Use

By using this website, you agree to these terms.

General information

The content on this website is provided for general information only and is not a substitute for professional advice, diagnosis, treatment or emergency support.

Intellectual property

Unless otherwise stated, the text and materials on this website are owned by Bohrisch Counselling and may not be copied or reused without permission.

External links

This website may contain links to external websites for convenience. I do not control those websites and am not responsible for their content or privacy practices.

Availability and accuracy

I aim to keep the information on this website accurate and up to date, but I do not guarantee that it will always be complete, accurate or uninterrupted.

Changes

I may update these terms at any time by posting a new version on this page.

Complaints Policy

If you are unhappy with any part of my service, please contact me in the first instance.

How to complain

Please send your complaint to hannabohrisch@gmail.com. I will acknowledge it within 3 working days and aim to respond within 6 working days.

Resolution

I will try to resolve concerns informally where possible. If needed, I may respond in writing or arrange a discussion.

External complaint

If your concern relates to data protection, you may also complain to the Information Commissioner’s Office.

Safeguarding Policy

I take safeguarding seriously and may share information if I believe a child, vulnerable adult or anyone else is at risk of serious harm.

Where possible, I will discuss concerns with you first. If there is immediate danger, I may contact emergency services or relevant safeguarding authorities without delay.

I will only share the minimum information necessary and will record the reason for any disclosure.

Record Retention Policy

I keep personal data only for as long as necessary for counselling, administration, legal, insurance and professional purposes.

Records may include

Contact details.
Appointment records.
Invoices and payment records.
Brief session notes, where needed.
Relevant correspondence.

Storage

Records are stored securely using password protection, encrypted systems where available, and/or a locked cabinet for paper records.

Destruction

When records are no longer needed, they are destroyed securely.