Last updated: November 2025
1. Introduction
I, Gabrielle Landric, am committed to protecting your privacy and respecting your personal data. This policy explains how I collect, use, and store personal information in line with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
I am registered with the Information Commissioner’s Office (ICO) — registration number: ZB747175.
If you have any questions about this policy or your data, please contact me:
- Name: Gabrielle Landric
- Practice name: Gabrielle Landric Psychotherapeutic Counselling
- Email: gabrielle@landrictherapy.co.uk
- Phone: 07387 215382
- Address: 63 High Bridge, Newcastle Upon Tyne, NE1 6BX
2. What Information I Collect
To provide counselling and psychotherapy services, I may collect and store:
- Personal details: name, contact information, age.
- Emergency contact details.
- GP or healthcare provider information.
- Session notes: assessment information and relevant background details you share.
- Administrative data: invoices, payment records, appointment scheduling details.
- Website contact form data (if applicable): name, email address, and message.
3. How I Collect Your Information
- Directly from you (during sessions, by phone, or email).
- Through website contact forms (if used).
- Occasionally from third parties (e.g., GP or referral agency), but only with your consent.
4. Why I Collect and Use Your Data
I process personal information to:
- Provide counselling and psychotherapy services.
- Communicate with you regarding appointments or queries.
- Maintain accurate professional records.
- Comply with legal and professional obligations (e.g., HMRC, insurance requirements).
Lawful bases under UK GDPR:
- Contract (Article 6(1)(b)) – to provide counselling services.
- Legal obligation (Article 6(1)(c)) – for record-keeping and accounting.
- Consent (Article 6(1)(a)) – for specific purposes such as liaising with your GP.
- Legitimate interests (Article 6(1)(f)) – to manage and develop my professional practice.
Sensitive (special category) data: processed under Article 9(2)(h) for the provision of healthcare.
5. How I Store Your Data
I take confidentiality and data security very seriously:
- Current session notes: Stored securely on Halaxy, a GDPR-compliant system, including client names.
- Contact details: Minimal details kept in a locked box, alongside the therapeutic will for my executor.
- Historic paper session notes: Stored in a separate locked cabinet, identifiable only by a code, not by client name.
- Laptop: Passcode-protected; rare sensitive files encrypted with VeraCrypt.
- Emails: Transmitted over secure HTTPS/TLS connections.
- Mobile devices: Work and personal phones have theft detection, remote lock/wipe enabled, strong passcodes, and 2FA for accounts. Only minimal client identifiers (first names, shortened if unusual) are stored locally.
Session notes and client records are kept for 7 years after work ends (or until a young person turns 25, whichever is longer), in line with professional and legal requirements, after which they are securely destroyed.
6. Professional Executor
In the event of my death or incapacitation, my appointed professional executor will have access to client records solely to:
- Inform clients of the situation.
- Manage or securely close client files.
Your confidentiality is maintained at all times during this process.
7. Sharing Your Information
Your information is confidential and will not be shared except:
- With your explicit consent (e.g., liaising with your GP).
- If required by law (e.g., serious risk of harm).
- For professional supervision purposes, with identifying details protected.
- With professional advisers (e.g., accountants, insurers) for administrative or legal compliance.
- With my professional executor, as outlined above.
8. Your Rights
You have the right to:
- Access the personal data I hold about you.
- Request corrections to inaccurate information.
- Request erasure of your data (in certain circumstances).
- Restrict or object to processing.
- Request data portability.
- Withdraw consent where it applies.
You can exercise these rights by contacting me at gabrielle@landrictherapy.co.uk.
If you are not satisfied, you may complain to the Information Commissioner’s Office (ICO): https://ico.org.uk/concerns/
9. Website and Cookies
My website uses essential cookies to ensure it functions properly. I may also use anonymised analytics cookies to understand website usage. You can control cookies through your browser settings.
10. Changes to This Policy
This policy may be updated occasionally. The latest version will always be available on my website. This version dated 11/11/25.