Privacy Notice

Surrey Talking Therapy / Linda Bignell Therapeutic Counselling

Last updated: 27 September 2026

About this notice

Linda Bignell is responsible for Surrey Talking Therapy and is the data controller for the personal information described in this notice.

Email: lindatcs@proton.me
Telephone: 07984 070483

Information collected

Information may include contact details; enquiry and appointment information; payment/administrative records; assessment information; brief clinical notes; health, mental-health, relationship or other sensitive information relevant to therapy; safeguarding/risk information; communications; information from a referrer, insurer, employer, EAP or another relevant third party; and website/cookie/analytics information.

How information is obtained and used

Most information comes directly from you. It may also be received from a person or organisation referring you, arranging or funding therapy, or another source you have authorised.

Information may be used to respond to enquiries; arrange appointments; assess whether therapy is appropriate; provide therapy and continuity of care; communicate with you; manage payments and administration; maintain appropriate records; obtain supervision; manage safeguarding or serious-risk issues; meet legal/professional obligations; and operate the website.

Lawful basis

Information needed to arrange and provide therapy is generally processed because it is necessary to take steps at your request and/or perform the therapeutic agreement. Legitimate interests may apply to running a safe, ethical and effective practice, maintaining records and responding to enquiries. Legal obligation and vital interests may also apply.

Where health or other special-category information is used for therapeutic work, additional legal protections apply, including where processing is necessary for health or social care/treatment by a professional working under duties of confidentiality. Other conditions may apply where necessary, including safeguarding, legal claims or explicit consent.

Clinical records, retention and supervision

Brief clinical notes may be kept to support continuity of care and professional practice. Records are retained only for as long as reasonably necessary having regard to professional, insurance, legal and regulatory requirements. Financial records may be retained for periods required by tax/accounting law.

Clinical work is discussed in regular professional supervision. Wherever practicable, information is anonymised or minimised so clients are not identified. Supervision is confidential, subject to legal, safeguarding and ethical responsibilities.

Confidentiality and sharing

Therapy is ordinarily confidential. Information may be shared where you request or consent to it; limited information is required to administer funded therapy; there is a safeguarding concern or serious risk; disclosure is required by law; necessary for legal claims; or ethically justified after careful professional consideration. Wherever possible, this will be discussed with you first and disclosure limited to what is necessary and proportionate.

Technology and practice systems

Appropriate digital services may be used for website hosting, forms, communications, appointment administration, record keeping, payments and other necessary practice functions. Linda Bignell remains responsible for deciding what information is required and why it is used.

AI and digital tools

Digital tools may be used to support administration, website/content work and professional thinking. Artificial intelligence may also be used as a supplementary thinking or drafting aid.

AI is not used to make clinical, safeguarding or other significant decisions about you. There is no solely automated clinical decision-making or profiling.

Identifiable clinical information is not deliberately entered into general-purpose AI systems. Where AI is used for professional reflection or to develop general therapeutic material, information is anonymised or minimised so it does not include names, contact details, addresses, workplaces, dates of birth, family names, client communications, session notes or distinctive identifying combinations.

The therapist or practice remains responsible for professional judgement, clinical decisions and the accuracy and appropriateness of material produced with digital or AI assistance. Clinical supervision remains the appropriate professional forum for ethical, clinical and risk decisions.

Service providers and international processing

Reputable third-party services may be used for website hosting, forms, email, practice administration, accounting, communications, analytics and other necessary business functions. These providers may act as processors on behalf of the relevant practice.

Some technology providers operate internationally or use infrastructure outside the UK. Where personal information is transferred or made accessible outside the UK, appropriate arrangements are used as required by UK data protection law, which may include UK adequacy regulations or approved contractual safeguards.

Personal information is not sold.

Keeping information secure

Reasonable technical and organisational measures are used to protect personal information. No electronic system can be guaranteed to be completely secure.

If a personal data breach occurs, it will be assessed promptly. The Information Commissioner's Office (ICO) will be notified where the law requires this, normally within 72 hours of becoming aware of a reportable breach where feasible. If a breach is likely to create a high risk to your rights and freedoms, you will also be informed without undue delay.

Your data protection rights

Depending on the circumstances and lawful basis, you may have rights to access personal information held about you; correct inaccurate information; request erasure or restriction in some circumstances; object to certain uses; receive certain information in a portable format where applicable; and withdraw consent where consent is the lawful basis.

These rights are not absolute. Some information may need to be retained or processed despite a request, for example where there is a legal, regulatory, safeguarding, insurance or legal-claims reason.

You also have the right to complain to the Information Commissioner's Office (ICO). Information is available at ico.org.uk.

Website, cookies and analytics

The website is hosted using Wix. Website forms collect information you choose to submit. Cookies and similar technologies may be used for security, functionality and analytics. Where consent is required for non-essential cookies, choices can be managed through the website's cookie controls and Cookie Policy.

Changes to this notice

This notice may be updated when information handling, legal requirements or professional requirements change. The current version will be published on the website.