Privacy Policy

Last updated: 01/08/2026

This policy explains how I collect, use, store, and protect your personal information, in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

1. Who I Am

Blanka Siejek, trading as Real Minds Therapy, is the data controller for the personal information described in this policy. I am a registered member of the BACP (British Association for Counselling and Psychotherapy), membership number 421118.

Contact: Blanka Siejek, ICO registration number: ZC220177

2. What Information I Collect

Depending on how you interact with me, I may collect:

  • Contact details: name, email address, phone number, address

  • Booking and session information: appointment times, session notes, themes discussed in therapy

  • Health-related information: information you share relating to your mental health, wellbeing, and personal history, which is necessary for me to provide safe and effective counselling. This is classed as "special category data" under UK GDPR.

  • Website usage data: if you use my website, I may collect basic analytics data via cookies (see Section 8)

3. How I Collect Information

  • Directly from you, via email, phone, my website enquiry/booking form, or during sessions

  • Session notes are written by me during or after our sessions

4. Why I Process Your Information (Legal Basis)

  • Contract: to provide the counselling service you've booked

  • Consent: for processing special category (health-related) data, in line with Article 9(2)(a) UK GDPR — by engaging in counselling with me, you consent to this

  • Legitimate interests: for administrative purposes such as invoicing and appointment scheduling

  • Legal obligation / vital interests: in rare circumstances, where I need to share information to protect someone's safety or comply with the law

5. How I Use Your Information

  • To provide and manage your counselling sessions

  • To maintain accurate, confidential clinical records, as required by good practice and BACP guidelines

  • To communicate with you about appointments and administrative matters

  • To liaise, in anonymised form, with my clinical supervisor

  • To meet legal and professional obligations

I do not use your information for marketing purposes without your separate, explicit consent.

6. Confidentiality and Limits‍ ‍

What you share in sessions is treated as confidential. I discuss my client work with my clinical supervisor, in anonymised form, as part of safe and ethical practice — this is a professional requirement, not optional.

I may share identifiable information without your consent in limited circumstances, including:

  • Where I believe you, or another person, is at serious risk of harm

  • Where required by law (for example, a court order, or safeguarding obligations relating to children or vulnerable adults)

  • Where required for the prevention or detection of serious crime

Where possible, and where it doesn't increase risk to you or others, I will discuss this with you before any disclosure is made.

7. Who I Share Your Information With

  • My clinical supervisor (anonymised)

  • My professional indemnity insurer, if a claim arises

  • Relevant authorities, only where legally required or necessary to protect safety (see Section 6)

  • [Payment processor name], for handling payments

  • I do not sell or share your data with third parties for marketing purposes

8. Cookies and Website Analytics

My website may use cookies or similar technologies to understand how visitors use the site (for example, Google Analytics). You can control or disable cookies through your browser settings.

9. How I Store and Protect Your Information‍ ‍

  • Session notes are kept securely, either in a password-protected digital format (encrypted) or in a locked location if on paper

  • Digital communications (email, booking system) are protected with appropriate security measures

  • Only I (and, where relevant, anonymised discussion with my supervisor) have access to your clinical information

10. How Long I Keep Your Information‍ ‍

I retain client records for [7 years] after the end of our work together, in line with professional insurance and BACP guidance, after which records are securely destroyed. [Confirm this period with your insurer — requirements can vary, and are sometimes longer for younger clients.]

11. Your Rights

Under UK GDPR, you have the right to:

  • Access the personal information I hold about you

  • Ask me to correct inaccurate information

  • Ask me to delete your information, in some circumstances

  • Restrict or object to how I process your information

  • Request a copy of your data in a portable format

  • Withdraw consent at any time (this doesn't affect the lawfulness of processing before withdrawal)

To exercise any of these rights, please contact me at blanka@realmindstherapy.co.uk. If you're unhappy with how I've handled your information, you have the right to complain to the Information Commissioner's Office (ICO) at www.ico.org.uk.

12. Children's Data

I do not knowingly work with clients under the age of 18 without appropriate additional safeguards and parental/guardian involvement as required.

13. Changes to This Policy

I may update this policy from time to time. The most recent version will always be available on my website.

14. Contact

‍Blanka Siejek, Real Minds Therapy blanka@realmindstherapy.co.uk, www.realmindstherapy.co.uk