Privacy Policy

Michelle Falkner - Rise Therapy 

Introduction

I, Michelle Falkner, am a sole practitioner offering private counselling and psychotherapy services. I adhere to current data protection legislation, including the UK GDPR, the Data Protection Act 2018, and the Privacy and Electronic Communications Regulations 2003. This notice explains how your personal information is collected, used, stored, and protected.

Lawful Basis for Processing

If you are currently receiving therapy or enquiring about therapy, your information is processed as necessary for the performance of our contract. After therapy has ended, information may be retained under legitimate interests. Special category data is processed for the provision of counselling and psychotherapy services.

Information Collected

When you make an enquiry, I may collect your name, telephone number, and email address. Referrals may also be received from healthcare professionals.

Confidentiality

Everything discussed in therapy is confidential except in the following circumstances:

  • Professional supervision (subject to confidentiality requirements).

  • Significant risk of harm to yourself or others.

  • Legal obligations, including safeguarding concerns or court orders.

Record Keeping

Personal details and anonymised session notes are stored securely using encrypted and GDPR-compliant systems. Records are not shared with third parties. A clinical will is in place to ensure appropriate handling of data in the event of death or incapacity.

Retention Period

Records and correspondence are generally retained for seven years after the end of contact and are then securely destroyed, unless legal, regulatory, or professional obligations require a longer retention period.

Your Rights

You have the right to access, correct, restrict, object to, or request deletion of your personal information, subject to applicable legal requirements.

Complaints

If you have concerns about how your personal information is handled, please contact me. You may also make a complaint to the Information Commissioner's Office (ICO).

Data Security

I take data security seriously and use encrypted devices and GDPR-compliant systems to protect personal information.