How We Handle Your Data Safely

Website Privacy Policy & Data Rights Notice

1. Who We Are

This website is a shared directory for the independent therapists who practise under the collective banner of Cross Counties Counselling.

Please note that we are not a partnership, single clinic, or joint business entity. Each individual therapist listed on this website operates completely independently as a self-employed sole trader.

Legally, each therapist is an independent Data Controller of their own practice. This means they are solely responsible for protecting, storing, and managing your personal information and clinical therapy records.

2. How Your Data Is Handled

This website does not store clinical health metrics or shared client files. To keep your information safe and private:

• No Shared Database: Your personal contact information or enquiry details are never pooled into a central database that all therapists can see.
• Direct Routing: Any contact button, telephone link, or email address on an individual therapist’s profile routes your enquiry exclusively to that specific therapist.

3. Subject Access Requests (SAR)

You have a legal right to request a copy of the personal data and therapy notes your counsellor holds about you.

• Submit Directly: You must email your request directly to your individual therapist using their contact email.
• Identity Checks: Your therapist will verify your identity before releasing any sensitive clinical records to protect your confidentiality.
• Reasonable Searches: In line with the Data (Use and Access) Act, searches for your information will be reasonable and proportionate.
• “Stop the Clock” Rule: Therapists have one calendar month to fulfil your request. However, if your therapist needs more information or clarification from you to complete the search safely, this 30-day timer will be paused until you provide it (The Data (Use and Access) Act 2025 (DUAA)).

4. Data Protection Complaints Procedure

Under the Data (Use and Access) Act, you have an explicit right to make a formal complaint if you believe your personal data has been handled incorrectly.

Because we operate separate practices, you must email your complaint directly to your specific therapist available on their website page. They will then follow this mandatory process:

1. 30-Day Acknowledgement: The individual therapist will formally acknowledge your complaint in writing within 30 calendar days.
2. Investigation: The therapist will independently investigate your concern without undue delay.
3. Written Outcome: You will receive a full written response detailing the outcome of the investigation.

If your individual therapist cannot resolve your data concern, you can escalate the matter directly to the UK’s data protection regulator, the Information Commissioner’s Office (ICO), via ico.org.uk/livechat or by calling 0303 123 1113.

This page is illustrative content carried over from the current site for preview purposes. Before publishing, please have this policy reviewed to confirm it reflects live legislation and practice.