October 2025
I am accepting new therapy clients.
Contact
Professional photo of Ashley NorwoodAshley Norwood, MBACP

Privacy Notice

Last updated: 21 September 2025

This privacy notice explains how I collect, use, and protect your personal information when you visit this website or contact me about therapy services. I comply with UK data protection law, including the UK GDPR and the Data Protection Act 2018.

More information about your privacy rights will be discussed if you begin therapy.

Who I am

At a glance

  • No marketing without consent
  • No sale of personal data
  • Minimal website analytics; no IPs stored by me

1. Information I collect

  • Contact details: your name, email address, and phone number when you enquire.
  • Enquiry details: information you choose to share in your message.
  • Therapy records: brief professional notes if you begin therapy.
  • Website data: basic analytics such as page views and the city-only geolocation derived by Cloudflare. I do not store IP addresses.

2. Why I use your information

  • To respond to your enquiry and arrange appointments.
  • To provide safe and effective therapy.
  • To maintain records required by my insurer and professional body (BACP).
  • To meet legal obligations, for example in safeguarding.

3. Lawful bases

  • Contract: to provide services you request.
  • Legal obligation: where I must comply with the law.
  • Vital interests: if there is a serious risk of harm.
  • Consent: for any optional uses such as newsletters. You can withdraw consent at any time.

4. How I store and protect your information

  • Digital records are stored securely in Bacpac, a practice management software.
  • Paper notes (rarely used) are kept in locked storage.
  • Access is limited to me and, if I am incapacitated, my professional executor for client notification.

I keep therapy notes for 7 years after therapy ends, in line with BACP guidance and my ethical duties, then securely destroy them. Enquiry emails are retained for a shorter period when no therapy takes place.

5. Sharing your information

I do not share your data with third parties unless you ask me to, I am required by law, there are safeguarding concerns, or my clinical will is activated to notify you. I do not sell or trade personal data.

6. Your rights

  • Access your data and receive a copy.
  • Ask me to correct inaccurate information.
  • Ask me to erase data where this is possible.
  • Restrict or object to certain processing.
  • Withdraw consent at any time for optional uses.
  • Complain to the ICO at ico.org.uk.

7. Cookies and website analytics

This website does not use cookies. This website uses minimal analytics. For basic service insights, my edge provider may derive a city-level location from your request. I do not store IP addresses in my systems.

8. Contact

If you have questions about this notice or your data, please email hello@ashleynorwoodtherapy.co.uk.

Let's talk

Contact Me