Privacy Policy

Last Updated - 23rd October 2026

I review my counselling privacy policy annually and whenever there are significant changes to my data protection services or data protection law. 


If I implement any significant changes that affect how your personal data is processed, I will inform you directly. 


The 'last updated' date at the top of this section shows when it was most recently reviewed, ensuring you are kept informed about how Hamish Travers Therapy handles your information.

Privacy Policy for Therapy


This website is operated by Hamish Travers, trading as Hamish Travers Therapy (referred to as "I", "me", or "we" throughout this policy). As a sole trader, I am personally the data controller — the person legally responsible for deciding how and why your personal data is used.



I have not appointed a formal Data Protection Officer, as this isn't a requirement for a practice of this size, but I am personally responsible for handling privacy matters and can be contacted using the details above.


2. Scope of this Policy

This policy explains how I collect, use, store, share, and protect personal data when you:


  • Browse this website
  • Read content about therapy, emotional wellbeing, or related topics
  • Get in touch via a contact or enquiry form
  • Book, enquire about, or attend a therapy session (whether arranged through the website or otherwise)
  • Subscribe to any newsletter or updates, if offered


It covers visitors and prospective or current clients. It does not cover the separate records I may keep as part of delivering therapy itself (such as clinical/session notes) unless those records were created or stored via this website — those are governed by my professional and clinical record-keeping obligations, which I'm happy to explain separately on request.


It does not cover third-party websites I link to — please check their own privacy policies.



3. A Note On Sensitive Topics

As a therapy practice, this website may involve you sharing information about your mental or physical health — for example, in an enquiry form describing what you'd like support with. 


This is "special category data" under Article 9 UK GDPR, and I only collect and use it where I have a valid, specific legal basis for doing so (see Section 6). You're never required to disclose health information simply to browse the site or ask a general question.


If you are in crisis or need urgent support, this website and any enquiry form is not a substitute for emergency help. Please contact Samaritans 116 123, Shout (text SHOUT to 85258), NHS 111, or 999 in an emergency.

4. Personal Data I Collect

5. How I Use Your Personal Data

6. My Legal Basis For Processing Your Data

Consent (Article 6(1)(a)): for anything not necessary to respond to your enquiry, such as an optional newsletter, and for analytics cookies and the data they collect (Google Analytics). You can withdraw your consent at any time using “Cookie settings” in the footer of this website, or by contacting me at privacy@hamishtraverstherapy.co.uk.


Contract (Article 6(1)(b)): where processing is necessary to respond to your enquiry or provide therapy you’ve booked.


Legitimate interests (Article 6(1)(f)): for running and securing the site, including preventing spam on the enquiry form (not for analytics, which relies on your consent).


Legal obligation (Article 6(1)(c)): where I must keep or disclose records to meet professional, insurance, or legal requirements.


For special category (health-related) data specifically, I rely on your explicit consent (Article 9(2)(a)) when you choose to share it, and, where I go on to provide you with therapy, the provision of health/social care treatment by a professional subject to a duty of confidentiality (Article 9(2)(h)), consistent with my professional body’s code of ethics.

7. Children's Data

This website is intended for adults. I don't knowingly collect personal data from children under 18, and don't offer services to children directly through this website. If you believe a child has provided data via this site, contact me at privacy@hamishtraverstherapsy.co.uk and I'll delete it.

8. Who I Share Your Data With

I don't sell personal data, and I keep the number of people who see it as small as possible. I may share data with:

  • GoDaddy, as the platform hosting this website and providing the Website Builder tool — see GoDaddy's own privacy policy for how they process data on my behalf as a processor.


  • Microsoft, which provides my email system. Enquiries sent through the website form are delivered to my Microsoft 365 email account. Microsoft acts as my processor.


  • Google, which provides Google Analytics (only if you accept analytics cookies) and reCAPTCHA on the enquiry form, which helps prevent spam. Google acts as my processor for analytics.


  • Apple, which provides iCloud storage. Client notes held in Apple Notes are locked with end-to-end encryption, so Apple cannot read their contents. Apple acts as my processor.


  • My professional supervisor, in anonymised or limited form, as part of standard clinical supervision practice (a professional requirement, not specific to this website).


  • Authorities or professional bodies, where required by law, or to protect someone's safety (for example, in line with safeguarding obligations).


I don’t use any advertising or marketing cookie tools, and Google Analytics is not used for advertising, so no data is shared for advertising purposes.

9. International Data Transfers

Some of the services I use, including Google (Analytics and reCAPTCHA) and Apple (iCloud), may process data outside the UK, for example in the United States. Where this happens, I rely on UK-approved safeguards, such as the UK-US data bridge or the UK International Data Transfer Agreement or Addendum. My Microsoft 365 data is stored [in the UK / in the EU: confirm your tenant’s data location].

10. How Long I Keep Your Data

11. Your Rights

If I implement any significant changes that affect how your personal data is processed, I will inform you directly. 


The 'last updated' date at the top of this section shows when it was most recently reviewed, ensuring you are kept informed about how Hamish Travers Therapy handles your information.

12. How I Keep Your Data Secure

I take reasonable technical and organisational steps to protect your personal data, including:

  • Keeping enquiries and client correspondence in a password-protected Microsoft 365 account with multi-factor authentication
  • Using devices that are passcode-protected and encrypted, and locking them when I’m away
  • Keeping access to your information to me alone, other than the providers listed in Section 8
  • Keeping client records pseudonymised: clinical notes are labelled with a coded identifier rather than a name, and the list linking codes to client names is kept separately and securely. Notes are held in a locked filing cabinet, or in password-protected, encrypted digital notes on my own device, and are securely destroyed or deleted at the end of the retention period in Section 10.
  • Using a secure (HTTPS) connection on this website

No method of transmitting or storing data is completely secure. If a breach occurred that put your rights at risk, I would tell you and the ICO as the law requires.

Please avoid sending sensitive health information by ordinary email or through the enquiry form beyond what you’re comfortable sharing.

13. Contact

I review my counselling privacy policy annually and whenever there are significant changes to my data protection services or data protection law. 


If I implement any significant changes that affect how your personal data is processed, I will inform you directly. 


The 'last updated' date at the top of this section shows when it was most recently reviewed, ensuring you are kept informed about how Hamish Travers Therapy handles your information.

14. Make A Complaint

Enquiry Form

This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.

Your complaint will be acknowledged within 30 days as required by the Data (Use and Access) Act 2025. Hamish Travers Therapy assures that your contact details will be used solely to process this complaint and will be retained for 6 years in line with our counselling privacy policy and data protection services in accordance with data protection law.

Hamish Travers Therapy

Wellbeing Centre Teddington, Station Road, Teddington, UK

privacy@hamishtraverstherapy.co.uk