McWilliams Therapy & Training Ltd
Privacy Statement
McWilliams Therapy & Training Ltd is the data controller responsible for your personal data. James McWilliams acts as therapist and director of the company. The company is registered in England and Wales (Company No. 17088555) and with the Information Commissioner’s Office (ICO reference ZC121601).
This practice complies with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. Personal data is processed to provide safe, ethical and professional therapeutic services.
Legal basis for processing
Personal data is processed under the following lawful bases, as applicable: contract to provide therapeutic services; legitimate interests to support safe and effective clinical practice such as supervision; legal obligation; vital interests where there is risk of serious harm; and explicit consent for special category data such as health information.
Information I may collect
This may include your name, gender or preferred identity, age or date of birth, relationships and dependants, occupation, address, telephone number and message preferences, email address, counselling or psychotherapy history, relevant medical information, medication details, presenting issues, and session notes or summaries. Some of this is special category data and receives additional protection.
How information is stored
Paper contact sheets and minimal identifying information are stored securely. Electronic records are kept on password-protected and encrypted devices, with backups via secure cloud services. Practice communications may include email and SMS or phone records, coded where possible. Reasonable steps are taken to keep data secure, and confidentiality is maintained within legal and ethical limits.
Service providers and international transfers
Providers used to support the practice include Apple iCloud for data storage, Google Mail for email, Xero for invoicing and Zoom for online sessions. Some personal data may be processed or stored outside the UK; where this occurs, appropriate safeguards such as standard contractual clauses are used.
How information may be shared
Aspects of my work may be discussed in professional supervision. Information is anonymised where possible, and supervisors are bound by confidentiality. In rare circumstances, personal data may be disclosed without your consent where there is a legal obligation or a risk of serious harm to you or others.
Therapeutic will
If I become incapacitated or die, your first name and contact details may be shared with a designated therapeutic executor solely to inform you. This sharing is limited to what is necessary and lawful.
Retention
Records are retained for up to seven years after therapy ends, in line with professional and insurance requirements. After this period, paper records are securely destroyed and electronic data is permanently deleted.
Your rights
You have the right to be informed about how your data is used, access your personal data, request correction of inaccurate data, request erasure where appropriate, and withdraw consent. You may also lodge a complaint with the Information Commissioner’s Office (ICO).
Data minimisation and breaches
Only information necessary for the provision of therapy is collected and retained. In the unlikely event of a data breach, I will follow ICO guidance and notify you where required.
Contact and full statement
For privacy enquiries, email james@mcwilliamstherapy.com. Read the full privacy statement (PDF).
Registered office: Suite 5, 315 Regents Park Road, London, N3 1DP. This statement reflects the downloadable privacy statement available on this site.