Privacy Policy

John Walter Counselling

Last updated: March 2026

This privacy policy explains how I collect, use, store, and protect your personal information when you make contact with me, use my website, or engage in counselling or psychotherapy with me. Please read it carefully.

1. Who I am

I am John Walter, an integrative psychotherapist and counsellor in private practice, based in Bude, Cornwall. I am registered with the National Counselling and Psychotherapy Society (NCPS) and work as a sole trader.

You can contact me at: john@johnwaltercounsellor.com

Website: www.johnwaltercounsellor.com

I am registered with the Information Commissioner’s Office (ICO) as a data controller. Ref: ZB271103

2. What information I collect

I may collect and hold the following categories of personal information:

  • Your name, contact details (email address, phone number, and postal address where relevant)
  • Information you share when making an enquiry through my website or by email
  • Appointment and booking information
  • Clinical notes made after sessions, including information you share about your life, relationships, mental and physical health, and any concerns or difficulties you bring to therapy
  • Emergency contact details, where provided
  • Billing information (where applicable)

3. How I collect your information

I collect information in the following ways:

  • Via the contact form on my website (enquiries are sent to my professional email address)
  • By email directly to john@johnwaltercounsellor.com
  • Via my online booking system (Google Calendar), where you provide your name and email address to book an appointment
  • During assessment and therapy sessions, through what you choose to share with me
  • Occasionally by telephone or text message for appointment-related communication

4. How I use your information

I use your personal information to:

  • Respond to your enquiry and arrange an initial consultation
  • Manage appointments and communicate with you about scheduling
  • Provide counselling and psychotherapy services
  • Keep clinical records, which support the safe and effective delivery of therapy
  • Fulfil my legal and professional obligations, including safeguarding duties

The legal basis for processing your data is: your consent (for initial contact and booking); the performance of a contract (for the provision of therapy); and legitimate interests (for keeping clinical records in line with professional guidance).

5. Where your data is stored and processed

I use the following third-party services, each of which processes personal data on my behalf:

Google Workspace (email and calendar)

I use Google Workspace for professional email and appointment booking. Google Workspace is a GDPR-compliant service operating under a Data Processing Agreement with Google. Your name and email address are stored within this system for the purpose of managing appointments.

WriteUpp (clinical records)

Once we begin working together, your clinical records are held securely in WriteUpp, a GDPR-compliant practice management system designed for healthcare practitioners. All clinical communication beyond basic administration takes place within this secure environment.

Zoom (online sessions)

Where sessions take place online, I use Zoom. I recommend that you review Zoom’s own privacy policy. Sessions are not recorded without your explicit consent.

6. Clinical supervision

As a registered therapist, I am required to attend regular clinical supervision. I may discuss aspects of our work in supervision, but I do so using only the minimum information necessary, and your identity will not be disclosed. Supervision is itself a confidential relationship governed by professional ethical standards.

7. Confidentiality and its limits

What you share in therapy is confidential. There are, however, limited circumstances in which I may be required or have good reason to break confidentiality:

  • Where there is a serious and immediate risk of harm to you or to another person
  • Where I am required to do so by law (for example, under terrorism legislation or a court order)
  • Where safeguarding concerns arise, particularly in relation to children or vulnerable adults
  • Where I have your explicit consent to share information with a third party

I work in accordance with the NCPS Ethical Framework, which guides my approach to confidentiality, safeguarding, and data protection.

8. Working with young people

Where I work with clients under the age of 18, I will discuss confidentiality arrangements and any consent requirements with the young person and, where appropriate, their parent or guardian, before therapy begins. I take my safeguarding responsibilities seriously and follow relevant statutory and professional guidance.

9. How long I keep your data

I retain client records for seven years following the end of therapy, in line with NCPS guidance. For clients who were under 18 at the time of therapy, records are retained until the client’s 25th birthday, or for seven years from the end of therapy, whichever is longer.

Enquiry data from people who do not go on to become clients is deleted within six months of the last contact.

10. Your rights

Under UK GDPR, you have the right to:

  • Access the personal data I hold about you (a Subject Access Request)
  • Request that inaccurate data is corrected
  • Request erasure of your data, subject to my legal and professional retention obligations
  • Object to or restrict processing of your data in certain circumstances
  • Withdraw consent, where consent is the basis for processing

To exercise any of these rights, please contact me at: john@johnwaltercounsellor.com

If you have a concern about how I handle your data, you have the right to complain to the ICO at ico.org.uk.

11. Changes to this policy

I may update this policy from time to time. The current version will always be available on my website. If you are an existing client and I make a significant change, I will let you know directly.