Privacy Policy

On this page, you can find my privacy policy, in line with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, and the BACP Ethical Framework for the Counselling Professions. If you would like to read an informal summary, click here.

 

Privacy Policy

Practice Name: Mark Goodwin Therapy

Therapist/Data Controller: Mark Goodwin
Professional Body: British Association for Counselling and Psychotherapy (BACP)
Contact Email: mark@markgoodwintherapy.com
Phone Number: 07736375962
Effective Date: 29/12/2025

 

1. Introduction

This privacy policy explains how I collect, use, store, and protect your personal data in accordance with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, and the BACP Ethical Framework for the Counselling Professions.

I am committed to protecting your privacy, maintaining confidentiality, and processing your personal data lawfully, fairly, and transparently.

 

2. Data Controller

I am the Data Controller responsible for your personal data.

Name: Mark Goodwin
Contact Details: mark@markgoodwintherapy.com

3. Personal Data I Collect

In line with the principle of data minimisation, I only collect the following personal data:

  • Name
  • Email address
  • Phone number

I do not collect or store any additional personal or sensitive data.

 

4. How Your Data Is Collected

Your personal data is collected directly from you when you:

  • Contact me via phone or email
  • Make an enquiry about therapy
  • Arrange or manage therapy sessions
  •  

5. Lawful Basis for Processing

Under UK GDPR, I process your personal data under the following lawful bases:

  • Consent – where you have given permission for me to contact you
  • Contract – where processing is necessary to provide the therapy services you request

You may withdraw your consent at any time by contacting me.

 

6. How Your Data Is Used

Your personal data is used only for:

  • Responding to enquiries
  • Communicating about appointments
  • Managing the practical aspects of therapy

Your data is not used for marketing and is not processed for any other purpose.

 

7. Confidentiality and Ethical Practice (BACP)

I work in accordance with the BACP Ethical Framework, which places a strong emphasis on confidentiality, respect, and client autonomy.

All client contact information is treated as confidential and accessed only by me.

 

8. Supervision

As required by BACP, I attend regular clinical supervision.

  • Any discussion of my work in supervision is fully anonymised
  • No names, contact details, or identifying information are ever shared
  • Your personal data is never disclosed to my supervisor

 

9. Limits to Confidentiality

Confidentiality is maintained at all times except where I am legally or ethically required to disclose information, for example:

  • Where there is a risk of serious harm to you or others
  • Where disclosure is required by law

If possible, such disclosures would be discussed with you beforehand.

 

10. Online Therapy

When providing online therapy:

  • Sessions take place via an agreed digital platform 
  • I take reasonable steps to ensure the platform is secure and appropriate for therapeutic work
  • I do not record online sessions
  • I do not store any additional personal data as a result of online therapy

     

Clients are responsible for ensuring they are in a private and secure environment during online sessions.

The same standards of confidentiality and data protection apply to online therapy as to in-person sessions.

 

11. Data Storage and Security

  • Your personal data is stored securely
  • It is accessed only by me
  • Appropriate technical and organisational measures are in place to protect against unauthorised access, loss, or misuse.

 

12. Data Sharing

Your personal data is:

  • Not shared with third parties
  • Not sold or transferred
  • Not stored or accessed by anyone else

Unless I am legally or ethically required to do so.

 

13. Data Retention

Your personal data is kept only for as long as necessary to:

  • Provide therapy services
  • Meet ethical, legal, and professional obligations

When no longer required, your data is securely deleted.

 

14. Your Rights Under UK GDPR

You have the right to:

  • Access your personal data
  • Request correction of inaccurate data
  • Request erasure of your data
  • Restrict or object to processing
  • Withdraw consent at any time

To exercise your rights, please contact me.

 

15. Complaints

If you have concerns about how your data is handled, please contact me directly.

You may also raise a complaint with the Information Commissioner’s Office (ICO):

Website: https://www.ico.org.uk

You can additionally raise ethical concerns with BACP if appropriate.

 

16. Changes to This Policy

This policy may be updated from time to time. The most recent version will always be available on request.