Introduction 

​

At the Encounter Learning Centre (“ELC”), we are committed to protecting and respecting your privacy. This Privacy Policy outlines how we collect, use, store, and protect your personal information when you engage with our psychotherapy services. This Policy is in compliance with the General Data Protection Regulation (GDPR) and relevant UK data protection laws. 

​

1. Data Controller 

Noa Rockman is the ELC Data Controller for the purposes of the GDPR. You can contact us at: Noa Rockman, nrockman@gamil.com, 07963801906 

​

2. Information We Collect 

We collect and process the following personal data: 

• Personal Identifiable Information: Name, address, phone number, email address, and other contact details provided during registration. 

• Sensitive Personal Data: Health and medical information, including mental health details, treatment history, and any other relevant details shared during therapy sessions. 

• Payment Information: Bank details, invoicing, and payment records. 

• Session Notes: Therapist notes, which may include observations from therapy sessions. 

• Communication Data: Emails, messages, or any other correspondence between you and the practice. 

 

3. How We Use Your Information 

We will only use your personal data for the following purposes: 

• Provision of Services: To provide psychotherapy services, including assessment, diagnosis, and treatment. 

• Communication: To contact you regarding appointments, sessions, and relevant updates. 

• Billing and Payment: To process payments and manage accounts. 

• Legal and Regulatory Requirements: To comply with legal obligations, including those imposed by governing bodies (e.g., BACP/NCP) and safeguarding laws. 

• Client Records: For maintaining accurate and confidential client records as required by professional and ethical guidelines. 

 

4. Legal Basis for Processing 

Under the GDPR, the lawful bases for processing your personal data are: 

• Consent: You have given clear consent for us to process your personal data for the purposes outlined. 

• Contractual Obligation: The processing is necessary for the fulfilment of our contract to provide psychotherapy services. 

• Legal Obligation: We are required by law to process certain information (e.g., in cases of safeguarding or regulatory requirements). 

• Legitimate Interest: We may process data for the legitimate interest of ensuring high standards of care and compliance with professional ethical standards. 

 

5. Confidentiality and Disclosure 

All information shared in therapy is confidential.

We will only disclose your information under the following circumstances: 

• With Your Consent: We may share information with your GP or other healthcare providers if you give us explicit written consent. 

• By Legal Requirement: We may need to share information if required by law, court order, or if there is a serious risk of harm to yourself or others (including safeguarding concerns). 

• For Supervision and Professional Development: We may discuss anonymized case details with supervisors in accordance with professional ethical standards. No identifying information will be disclosed. 

 

6. Data Retention 

• Client Records: We will retain your personal data, including session notes, for as long as is necessary for the provision of services and as required by professional guidelines. 

• Payment Information: Payment records will be retained for 6 years in accordance with UK tax regulations. After the retention period, your personal data will be securely destroyed. 

 

7. Your Rights 

Under GDPR, you have the following rights regarding your personal data: 

• Right to Access: You can request access to the personal data we hold about you. 

• Right to Rectification: You have the right to request correction of any inaccurate or incomplete data. 

• Right to Erasure: You may request the deletion of your data, subject to legal or professional obligations to retain certain information. 

• Right to Restrict Processing: You can request that we limit the use of your personal data in certain circumstances. 

• Right to Data Portability: You have the right to receive your data in a structured, commonly used, and machine-readable format. 

• Right to Object: You can object to the processing of your personal data if you feel it impacts your rights and freedoms. 

To exercise any of these rights, please contact us at 07963801906 

​

8. Data Security 

We take appropriate technical and organizational measures to safeguard your personal data against unauthorized access, loss, or damage. These measures include: 

• Encryption: All digital client records and communications are stored securely using encryption methods. 

• Access Control: Access to client records is restricted to the Therapist and authorized personnel only. 

• Physical Security: Paper records, if any, are stored in locked and secure facilities. 

 

9. Complaints 

If you have concerns or complaints about how your data is handled, please contact us directly at nrockman@gmail.com . You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) if you believe your rights under data protection laws are being infringed. 

ICO Contact Details: 

• Website: www.ico.org.uk 

• Phone: 0303 123 1113 

 

10. Changes to This Privacy Policy 

We may update this Privacy Policy from time to time in order to reflect changes to our practices or for other operational, legal, or regulatory reasons. Any updates will be posted on this website. 

​

11. Contact Information 

If you have any questions or concerns about this Privacy Policy, or wish to exercise any of your rights, please contact: 

Noa Rockman, nrockman@gamil.com, 07963801906