Depending on your circumstances and the service you receive, I may collect: Personal information: • Your name • Email address • Contact details • Date of birth, where relevant • Emergency contact details Information relating to your therapy This may include information you choose to share about: • Your emotional wellbeing • Your mental health • Your circumstances • Previous or current treatment • Relevant medical information • Your goals for therapy • Information discussed during sessions • Progress and therapeutic outcomes This information may constitute special category data under UK data protection law and is handled with particular care.

At Your New Reflection, I understand that the information you share during counselling is personal and often sensitive. This notice explains how I collect, use, store and protect your personal information when you become a client. It should be read alongside my full Privacy Policy, which is available on my website.

Your New Reflection is a sole trader practice operated by: Kate Rogers NCPS Accredited Registrant Email: kate@yournewreflection.com I am responsible for deciding how your personal information is collected and used in connection with your therapy

Information may be collected through: • Initial enquiries • The website contact form • Email • Assessment or intake information • Conversations before therapy begins • Information you provide during sessions • Appointment and payment records Please avoid including highly sensitive information in an initial website enquiry unless it is necessary.

Your information is used to: • Respond to your enquiry • Assess whether the service is appropriate for you • Arrange appointments • Provide counselling, hypnotherapy or NLP • Maintain appropriate professional records • Monitor your therapeutic progress • Communicate with you about appointments • Process payments • Meet professional, legal and regulatory obligations • Protect your safety and the safety of others where necessary

What you discuss with me is treated as confidential. I will not normally share information about you with other people without your permission. There are, however, circumstances where confidentiality may need to be broken. These can include circumstances where: • There is a serious and immediate risk of harm to you. • There is a serious risk of harm to another person. • There are safeguarding concerns involving a child or vulnerable adult. • Disclosure is required by law. • A court or other lawful authority requires information to be disclosed. Where appropriate and safe to do so, I will discuss concerns about confidentiality with you before information is shared.

As an NCPS Accredited Registrant, I undertake professional supervision. Information may be discussed during supervision where this is necessary to support safe and ethical practice. I will take reasonable steps to protect your identity and maintain confidentiality when discussing client work.

Your client records are stored electronically on a password-protected computer. I take reasonable steps to prevent unauthorised access, loss or misuse of your information.

Your client records are currently retained for seven years after therapy ends. After this period, records will be securely deleted unless there is a legal or professional reason why they need to be retained for longer.

Online sessions are provided through Google Meet. You should attend online sessions from a private location where you cannot reasonably be overheard. You should also take reasonable steps to protect your own privacy, such as using a private device and secure internet connection where possible.

I may use your email address to: • Respond to enquiries • Arrange or confirm appointments • Communicate about your sessions • Send relevant administrative information Email is not completely risk-free, so please avoid sending highly sensitive information by email unless necessary.

Payments are made by bank transfer. Payment information may be retained as part of financial and accounting records where required.

Depending on the circumstances, you have rights under UK data protection law including the right to: • Ask for a copy of the personal information I hold about you. • Ask for inaccurate information to be corrected. • Request deletion of information where applicable. • Request that processing is restricted in certain circumstances. • Object to certain types of processing. Some rights are subject to legal and professional requirements, so they may not apply in every situation. If you would like to exercise a data protection right, please contact: kate@yournewreflection.com

If you have concerns about the way your personal information is handled, please contact me first so I have an opportunity to address your concern. You also have the right to complain to the Information Commissioner's Office (ICO). The ICO website is:ico.org.uk

I may update this Client Privacy Notice from time to time to reflect changes in my practice, legal requirements or the way information is processed. The current version will be provided to clients where appropriate.

If you have questions about the information provided on this website, you can contact: Your New Reflection Kate Rogers NCPS Accredited Registrant Email: kate@yournewreflection.co