Privacy | Kate Williams Therapy

December 2025

We are committed to safeguarding your privacy and handling your data in a transparent and secure way.

1. Who We Are

Kate Williams Therapy

We are registered and operate in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

2. Information We Collect

We may collect and process the following types of personal data:

a) Information You Provide

Name
Email address
Phone number
Information submitted through contact forms
Information shared via email or during enquiries
Any information you voluntarily provide relating to your wellbeing or circumstances

that also collects payment information

Below is a revised and complete UK Privacy Policy for a counselling and therapy website that also collects payment information.
It reflects UK GDPR, Data Protection Act 2018, and common practice for therapists using third-party payment processors (e.g. Stripe, PayPal, Square).

You should still have this reviewed by a solicitor or data-protection specialist before publishing.

b) Payment Information

When you make a payment, we may collect:

Payment amount
Date and time of payment
Transaction reference numbers
Billing name and email address

We do not store or process full card details on our servers.
Payments are processed securely by third-party payment providers.

c) Technical Information

We may collect limited technical data such as:

IP address
Browser type
Device information
Cookies (see Section 10)

3. Special Category (Sensitive) Data

As a counselling and therapy service, we may process special category data, including information about mental health or wellbeing.

We only collect and process this data when:

You explicitly provide it, and
It is necessary for providing therapeutic services

This data is handled with strict confidentiality and additional safeguards.

4. How We Use Your Information

We use your data to:

Respond to enquiries
Provide counselling and therapy services
Manage bookings and appointments
Process payments
Maintain accurate client records
Comply with legal and professional obligations
Improve our website and services

5. Legal Basis for Processing

Under UK GDPR, our lawful bases for processing your data include:

Consent – when you submit information or agree to therapy
Contract – to provide agreed services
Legal obligation – for record-keeping, tax, or regulatory compliance
Legitimate interests – to manage and improve our services safely and effectively

For special category data, we rely on:

Explicit consent, and
Provision of health or social care

6. Payments and Third-Party Processors

Payments are processed securely by trusted third-party payment providers such as:

[e.g. Stripe / PayPal / Square – insert as applicable]

These providers are responsible for securely handling your card details and comply with UK GDPR and PCI-DSS standards.

We only receive confirmation of payment and relevant transaction details.

7. How We Store and Protect Your Data

We take appropriate technical and organisational measures to protect your data, including:

Secure password-protected systems
Encrypted devices and services where appropriate
Restricted access to client information
Secure storage of paper records (if applicable)

We only retain personal data for as long as necessary and in line with professional, legal, and insurance requirements.

8. Data Sharing

We do not sell or share your personal data for marketing purposes.

We may share limited data only when necessary with:

Payment processors
Professional supervisors (anonymised where possible)
Legal or regulatory authorities if required by law
Insurance providers (where relevant)

All third parties are required to respect confidentiality and data protection laws.

9. Your Rights

Under UK GDPR, you have the right to:

Access your personal data
Request correction of inaccurate data
Request erasure of your data (where applicable)
Restrict or object to processing
Request data portability
Withdraw consent at any time

To exercise your rights, contact us using the details above.

You also have the right to complain to the Information Commissioner’s Office (ICO):
https://www.ico.org.uk

10. Cookies

Our website may use cookies to ensure it functions correctly and to improve user experience.

You can manage or disable cookies through your browser settings.

11. External Links

Our website may contain links to other websites. We are not responsible for the privacy practices of external sites and encourage you to read their privacy policies.

12. Changes to This Policy

We may update this Privacy Policy from time to time.
The latest version will always be available on our website.