Privacy Policy

Confidentiality, Record Keeping, and Professional Practice

Rosalind Raven Counselling

At Rosalind Raven Counselling, your privacy, dignity, and safety are of paramount importance. The following outlines how confidentiality is maintained, the limits to confidentiality, and how your information is handled in accordance with professional, ethical, and legal standards.

Professional Supervision

As a requirement of the British Association for Counselling and Psychotherapy (BACP), I engage in regular clinical supervision to ensure safe, ethical, and effective practice.
During supervision:

  • Elements of our therapeutic work may be discussed to support high-quality care

  • I do not share your full name or any identifying information

  • All material used is anonymised, and supervisors are also bound by strict confidentiality

Supervision exists solely to enhance the quality and safety of the therapy you receive.

Confidentiality in Counselling

Everything you share in counselling is treated as strictly confidential. I am bound by the BACP Ethical Framework and by UK data protection legislation to uphold your privacy.

Confidentiality will only be broken under specific legal or ethical circumstances, including:

  • When there is a significant risk of harm to yourself or to others

  • When required to comply with a court order, police investigation, or legal obligation

  • When safeguarding concerns arise involving a child or vulnerable adult

  • When information is disclosed relating to serious crime (e.g., substantial financial crime, acts associated with terrorism)

Whenever possible, I will discuss these concerns with you beforehand and involve my supervisor to ensure the most ethical and supportive course of action. However, immediate disclosure may be required if there is an urgent risk to life or safety.

Risk and Safety Planning

If you communicate a clear and immediate intention to end your life, or if I believe there is compelling evidence of serious risk, we may collaboratively put a Safety Plan in place.
This may include:

  • Contacting your local mental health crisis team

  • Reaching out to emergency services

  • Calling the Samaritans or other crisis support services

  • Involving a trusted person with your consent

The aim is always to safeguard your wellbeing while maintaining as much autonomy and choice as possible.

Record Keeping and Data Protection

I keep brief, accurate notes of our sessions, as required for responsible clinical practice. These notes:

  • Are stored securely on a password-protected external hard drive

  • Are anonymised wherever possible to protect your identity

  • Are not shared with anyone unless legally compelled (e.g., court order)

  • Are retained for the legally required period (usually 7 years, or until 7 years after a young person reaches 18)

I am registered with the Information Commissioner’s Office (ICO), and all information is handled in accordance with the Data Protection Act 2018 (DPA 18) and UK GDPR regulations.
Further guidance on your data rights is available on the ICO website.

Your rights include:

  • Access to the information I hold about you

  • Requesting corrections

  • Requesting deletion where legal and ethical obligations permit

  • Understanding how your data is used, stored, and protected

Recording of Sessions

To protect confidentiality and maintain professional boundaries, audio and video recording of sessions is strictly prohibited.
This applies to:

  • In-person sessions

  • Online video sessions

  • Telephone sessions

Recording without explicit written consent is not permitted under any circumstances.

Online Working and Third-Party Platforms

When working online (e.g., via Zoom), I take all reasonable measures to ensure secure communication and data protection. However:

  • Online platforms involve third-party providers

  • I cannot be held responsible for security breaches that occur outside my control

  • You are encouraged to ensure your own device and internet connection are secure and private

I use reputable platforms that meet industry standards for encryption and data protection.