Privacy Policy

1. Introduction

This Privacy Policy outlines how Suzanna Mackenzie, MSc, MBACP Accred. (“Practitioner”, “we”, or “us”) collects, processes, and protects your personal data in compliance with the UK GDPR and Data Protection Act 2018. By using our services or website (www.suzannamackenzie.co.uk), you consent to the practices described below.

2. Data Collected

2.1 Personal Information

We collect:

• Contact details: Name, address, email, phone number.

• Health information: Session notes, therapy goals, medical history (shared voluntarily).

• Financial data: Payment records for invoicing.

2.2 Special Category Data

Sensitive information (e.g., mental health status, sexual orientation) is processed under GDPR Article 9(2)(h) for healthcare purposes.

3. Legal Basis for Processing

• Contractual necessity: To deliver therapy services.

• Legal obligation: For tax/accounting records (retained for 7 years).

• Explicit consent: For sharing data with third parties (e.g., GP referrals).

4. How We Use Your Data

• To provide psychotherapy services and manage appointments.

• To process payments and issue invoices.

• To comply with safeguarding obligations (e.g., risk of harm).

5. Data Storage & Security

• Session notes: Anonymised and stored on a password-protected device.

• Client details: Secured in encrypted files, separate from clinical notes.

• Retention: All data deleted/destroyed 7 years after therapy ends, except legal/financial records.

6. Your Rights

Under UK GDPR, you may:

• Request access to your data (Subject Access Request).

• Correct inaccurate information.

• Withdraw consent (where applicable).

• Request erasure of non-essential data.

Submit requests via email to contact@suzannamackenzie.co.uk. Responses provided within 30 days.

7. Third-Party Sharing

7.1 Confidential Exceptions

Data may be disclosed without consent if:

• There is a safeguarding risk (e.g., harm to self/others).

• Required by law (e.g., court order, terrorism prevention).

7.2 Service Providers

• Pixieset: Client portals and document templates use encrypted storage.

• Supervisors: Case discussions use anonymised details only.

8. Website & Cookies

• Analytics: Anonymous traffic data collected via GDPR-compliant tools.

• Cookies: Used for site functionality only (e.g., contact forms). No third-party tracking.

9. Complaints

Contact Suzanna Mackenzie directly with concerns. If unresolved, you may escalate to:

• Information Commissioner’s Office (ICO): www.ico.org.uk

• BACP Ethics Team: www.bacp.co.uk/complaints

10. Updates

This policy is reviewed annually. Changes are published at:

www.suzannamackenzie.co.uk/privacy-policy.

Contact Information

Suzanna Mackenzie, MSc, MBACP Accred.

Email: contact@suzannamackenzie.co.uk | Phone: 07970420283

Address: The Cabin, Brownshill Road, Stroud, Gloucestershire GL6 8AS

This policy adheres to the BACP Ethical Framework and UK law.

Last updated: 01/06/2025