Last updated: 26 August 2026

DBB Psychotherapy Ltd respects your privacy and is committed to protecting your personal information.

This Privacy Notice explains how personal information is collected, used, stored and protected when you visit this website, contact me about psychotherapy, or become a client.

I process personal information in accordance with applicable UK data protection law, including the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

1. Who is responsible for this information?

The data controller responsible for your personal information is:

The practice’s registered address is 167-169 Great Portland St, 5^th Floor, London, W1W 5PF. Psychotherapy sessions may be provided online, as agreed with the client.

If you have any questions about how your personal information is handled, please contact me using the email address above.

2. What personal information do I collect?

Depending on how you interact with me, I may collect:

• your name and contact details, such as your email address and telephone number;
• information you provide when making an enquiry or requesting an introductory call or consultation;
• information contained in messages you send through the website contact form or by email
• information you choose to provide about your circumstances, wellbeing, mental health or reasons for seeking psychotherapy;
• information required to arrange and administer psychotherapy sessions, including appointment and payment information;
• information necessary to manage the professional and administrative aspects of the therapeutic relationship;
• information contained in clinical notes and records;
• information relating to communications with you by telephone, SMS, email, or video-conferencing platforms;
• information processed in connection with accounting and financial administration;
• where applicable, information relating to insurance or referrals.

I ask you to avoid including highly sensitive or unnecessary personal information in an initial website enquiry.

3. How I use your information

I use personal information only where necessary for purposes connected with my psychotherapy practice, including to:

• respond to enquiries and requests for information;
• arrange an introductory call or consultation;
• assess whether psychotherapy may be appropriate and whether we are able to work together;
• arrange, provide and administer psychotherapy sessions;
• communicate with you about appointments and practical arrangements;
• maintain appropriate professional and clinical records;
• process payments and manage accounts;
• meet legal, regulatory and professional obligations;
• protect the safety and wellbeing of clients and others where this is necessary and appropriate;
• deal with complaints, queries or legal matters.

I do not use your personal information for unrelated marketing purposes.

4. Lawful basis for using your information

Under UK data protection law, I must have a lawful basis for processing your personal information. Depending on the circumstances, I may rely on:

• contract or steps taken at your request before entering into a contract; for example, where processing is necessary to arrange and provide psychotherapy services;
• legitimate interests; where processing is reasonably necessary for the administration and proper operation of my practice, provided that these interests are not overridden by your rights and interests;
• legal obligation; where I am required to retain or disclose information to comply with a legal obligation;
• consent; where consent is the appropriate lawful basis for a particular use of your information.

Some of the information I process, including information concerning your mental health and wellbeing, may constitute special category personal data under the UK GDPR. Where I process special category personal data, I will ensure that an applicable condition under Article 9 UK GDPR is satisfied in addition to the relevant lawful basis under Article 6 UK GDPR.

For the provision of psychotherapy and related healthcare services, I rely on an applicable lawful basis under Article 6 UK GDPR and the health or social care condition under Article 9  (2)(h) UK GDPR, together with the applicable requirements of the Data Protection Act 2018. For other processing activities, the lawful basis and any applicable Article 9 condition will depend on the nature and purpose of the processing.

5. Confidentiality

Psychotherapy involves a high degree of confidentiality. Information you share with me will normally be kept confidential and will not be disclosed to others without your knowledge and, where appropriate, consent. There are limited circumstances where information may need to be disclosed without your consent, for example where I have a legal obligation to do so, where disclosure is necessary to protect someone from serious harm, or where this is otherwise permitted or required by law or professional obligations.

Where appropriate, I may discuss aspects of my clinical work with a qualified supervisor for professional supervision. Information will be shared on a confidential basis and with appropriate regard for professional, ethical and data protection requirements.

6. Who may receive your information?

I do not sell or rent your personal information.

Where necessary for the operation of my practice, personal information may be shared with trusted third parties who provide services such as:

• website hosting and related technical services, including WordPress.com;
• email communications services, including Gmail;
• clinical note-taking, including reMarkable and reMarkable Cloud;
• payment or accounting services, including FreeAgent and my accountant;
• cloud-storage services, including Google Drive and iCloud, where personal information is stored or synchronised through these services;
• telephone and SMS communications services, including EE;
• professional supervision and professional, legal or regulatory advisers where appropriate.

Personal information may also be disclosed to healthcare or insurance providers where appropriate and lawful, including where you have given consent where consent is required.

Any third parties processing personal information on my behalf should only process it for appropriate purposes and in accordance with applicable data protection requirements.

7. WordPress.com contact form

If you use the contact form on this website, I collect the information you choose to provide, including your name, email address and message. This information is used to respond to your enquiry and, where relevant, to arrange an introductory call or consultation.

Please be aware that ordinary email and online contact forms are not necessarily suitable for sending highly sensitive or urgent information. Please do not use the website contact form to provide information that is not necessary for your initial enquiry.

8. Cookies

This website does not use non-essential cookies. No analytics, advertising, behavioural tracking or other non-essential cookies are intentionally used on this website.

The website may use cookies or similar technologies that are strictly necessary for the technical operation, security or functionality of the website. Where such technologies are used, they are not used to track your browsing activity for advertising or analytics purposes.

The rules concerning cookies distinguish between strictly necessary technologies and non-essential cookies. Non-essential cookies generally require the user’s consent before they are placed on a device.

If the website’s use of cookies or similar technologies changes in the future, the Privacy Notice will be updated and, where required, an appropriate consent mechanism will be provided.

9. How long is this information kept?

I retain personal information only for as long as it is reasonably necessary for the purposes for which it was collected, taking into account applicable legal, professional, accounting, insurance and regulatory requirements.

The length of time information is retained depends on the type of information, the purpose for which it is held, the nature of the therapeutic relationship and any applicable legal, professional or regulatory requirements.

Clinical and client records are retained for an appropriate period following the end of psychotherapy, taking into account applicable professional guidance, legal and regulatory requirements and the practice’s record-retention arrangements.

Information relating to enquiries that do not result in a therapeutic relationship is retained only for as long as reasonably necessary to respond to and administer the enquiry and to meet any applicable legal or business requirements.

I periodically review the personal information I hold and securely delete or otherwise dispose of information when it is no longer required.

10. How I protect your information

I take reasonable and appropriate technical and organisational measures to protect personal information against loss, misuse, unauthorised access, alteration or disclosure.

Access to personal information is limited to those who need it for legitimate professional or administrative purposes.

However, no method of transmitting or storing information electronically can be guaranteed to be completely secure.

11. Transfers outside the UK

Some of the service providers I use may process personal information outside the UK. Where personal information is transferred outside the UK, I will ensure that the transfer is made in accordance with applicable UK data protection law and that appropriate safeguards are in place where required.

12. Your data protection rights

Subject to certain legal exceptions and depending on the circumstances in which your information is processed, you may have the right to:

• ask for personal information I hold about you;
• ask for inaccurate or incomplete information to be corrected;
• ask for your information to be erased in certain circumstances;
• ask for processing to be restricted in certain circumstances;
• object to certain types of processing;
• ask for your information to be transferred to another organisation in certain circumstances;
• withdraw consent where processing is based on consent.

These rights are subject to limitations and do not apply in every circumstance. If you wish to exercise any of these rights, please contact me at danielle.berry656@gmail.com.

I may need to verify your identity before responding to a request.

13. Complaints

If you have concerns about the way I use your personal information, please contact me first so that I have an opportunity to address your concerns. You also have the right to complain to the Information Commissioner’s Office (ICO), the UK’s independent supervisory authority for data protection.

You can find information about making a complaint on the ICO’s website: https://ico.org.uk/make-a-complaint/.

14. Changes to this Privacy Notice

I may update this Privacy Notice from time to time to reflect changes in the way I process personal information, changes to the website, or changes in applicable legal or regulatory requirements.

The latest version will be published on this website and will show the date on which it was last updated.

15. Contact

If you have any questions about this Privacy Notice or how your personal information is handled, please contact: