Privacy Policy

Privacy Policy

General Data Protection Regulation (GDPR) refers to any personal information that I collect, store and share. Here are the details of my GDPR policy:

Personal Information I will Collect:

  • Your name, address & date of birth
  • Relationships, occupation, hobbies and interests
  • Telephone numbers (plus permission to send SMS & leave voice message)/email address
  • Medical conditions relevant to the sessions
  • Prescribed medication
  • Details of your GP for me to contact in case of emergency or in the rare situation where I feel you may harm yourself or others
  • Any other information you feel you would like to share (but this is optional)
  • Session summary of what you want to achieve by coming to see me

Storing Your Personal Information:

  • Paper: written notes (described below)
  • Smartphone: I will store your contact information in my phone which is password protected.  I do not store your full name, I keep a record of your first name followed by the leading letter of your surname. This allows me to contact you in case of emergencies or to re-arrange appointments
  • Email: your email address and correspondence will be stored in my email account by nature of you contacting me.  This will be deleted once we have finished the sessions and signed you off.  Any relevant emails that I feel needs to be kept will be printed off and added to your written notes
  • Website: none of your personal information is stored on my website, other than to momentarily collect and send it to my email account for the purposes of our initial contact.  Any further communications are deleted once the correspondence has been completed

Documents Held:


  • Initial Consultation notes including contact details.
  • Client/therapist Agreement
  • Brief Session Notes
  • GDPR Agreement


  • Contact name and telephone numbers
  • Email/SMS

How I may Process/Share Your Personal Information:


As per the requirements of the AfSFH and CNHC, I attend regular supervision sessions. This allows me to voice any concerns I may have in a safe environment which is strictly confidential. My supervisor will not know you personally or professionally, and I will not refer to you by name but I may refer to your information verbally when it’s helpful to the professional processes.


If your health is in jeopardy or I feel you may harm yourself, I may share your contact information with an emergency healthcare service (e.g. GP or Mental Health Crisis Team). 

If I become aware of your intent to cause harm to another person/organisation, the law may require that I inform an authority including sharing your contact details.

My Website

On this site I use only performance cookies. These are used to collect information on how users interact with websites and Google Analytics. These details are anonymous and are only used to improve how a website functions.

Third Party Links

This website may include links to third party websites (not owned or contracted by Lucy Brown), plug-ins and applications. Clicking on those links or enabling those connections may allow third parties to collect or share data about you. When you leave my website, I encourage you to read the privacy policy of every website you visit.

Erasing Your Information

When we have finished working together, I will erase electronic copies of your information and any correspondence within one month of completion of the sessions.

I will store your written information in a secure place for up to seven years after the completion of our work together. This is so that I have a reference of our work in situations such as you returning to sessions in the future and it is also an obligation under my professional standards and insurance policy. After this time has passed, I will shred the written information.

You have the Following Rights:

  • To be informed of what information I hold (i.e. this document).
  • To see the information I hold about you (free of charge for the initial request).
  • To rectify any inaccurate or incomplete personal information.
  • To withdraw consent to me using your personal information.
  • To request your personal information be erased (though I can decline whilst the information is needed for me to practice lawfully & competently).

NB: A printed copy of this statement will be given to you when we first meet at the initial consultation.

If we agree to continue working together, we will both sign the printed copy of this statement to indicate our agreement.