Privacy Policy

Last updated: 29 September 2026

Who I Am

This website is operated by Andrea Dobson, trading as Fitzrovia Counselling Psychology. I am registered with the Information Commissioner's Office (ICO) as a data controller, registration number ZB755066.

Contact: contact@fitzroviaworkplacepsychology.com Address: Goodge Place, Fitzrovia, London]

What Personal Data I Collect

Depending on how you interact with this website and my services, I may collect:

  • Contact details - name, email address, phone number, submitted via the contact form or booking system.

  • Enquiry and booking information - details you provide about why you're getting in touch, appointment preferences.

  • Clinical information - if you become a client, notes and information shared during sessions, including health and mental health information (this is classed as "special category data" under UK GDPR).

  • Technical data — cookies and analytics data collected via the website (see my separate Cookie Policy for details)

How I Use Your Data

I use your personal data to:

  • Respond to enquiries and arrange appointments

  • Provide therapy services, including maintaining clinical records

  • Process payments for sessions

  • Meet my legal and professional obligations (e.g. record-keeping requirements under HCPC/BPS guidelines)

  • Improve this website, using anonymised or aggregated analytics data where possible

Lawful Basis for Processing

  • Contact and booking data: processed on the basis of taking steps prior to entering into a contract with you, and/or legitimate interest in responding to enquiries.

  • Clinical/health data: processed under UK GDPR Article 9(2)(h), provision of health or social care, and/or your explicit consent, given at the start of our work together.

  • Website analytics/cookies: processed on the basis of consent, gathered via the cookie banner.

Who Has Access to Your Data

Your information is kept confidential. It may be shared only in limited circumstances:

  • With my clinical supervisor, in anonymised or minimally identifying form, as part of standard professional practice and ethical obligations.

  • Where required by law, or where there is a serious risk of harm to you or others (in line with my professional confidentiality policy, explained at the outset of therapy).

  • With relevant third-party service providers who support the running of my practice (e.g. booking system, payment processor), under appropriate data processing agreements.

I do not sell or share your data for marketing purposes.

How Long I Keep Your Data

  • Clinical records are retained for only 7 years after the end of treatment, or longer for certain circumstances, in line with professional guidance.

  • Enquiry data from those who do not go on to become clients is retained for 6 months before being securely deleted.

  • Website analytics data is retained according to the relevant tool's default policy (see Cookie Policy).

Your Rights

Under UK GDPR, you have the right to:

  • Access the personal data I hold about you.

  • Request correction of inaccurate data.

  • Request deletion of your data, where applicable.

  • Restrict or object to certain processing.

  • Withdraw consent at any time, where processing is based on consent.

  • Lodge a complaint with the ICO (ico.org.uk) if you have concerns about how your data is handled

To exercise any of these rights, please contact me at andrea.dobson@fitzroviaworkplacepsychology.com.

Data Security

I take appropriate technical and organisational measures to protect your personal data, including secure storage of clinical records and encrypted transmission of data where applicable.

Changes to This Policy

I may update this Privacy Policy from time to time. Any changes will be posted on this page with a revised "last updated" date.

Questions?

If you have any questions about this Privacy Policy or how your data is handled, please get in touch via email contact@fitzroviaworkplacepsychology.com