Legal
How I handle your personal information, and the rights you have over it.
I am Helen Carroll, a psychotherapeutic counsellor practising in Central London and online. I am the data controller for the information described in this notice. You can reach me at helen@helencarrollpractice.com.
If you send a message using the contact form, I collect the name, email address, phone number and message you choose to provide. This is used only to reply to you and to arrange an introductory call if you would like one.
Messages from the form are delivered directly into my own Microsoft 365 mailbox and are not handled by any other company. My email is hosted by Microsoft 365, and this website is hosted by Cloudflare.
This website uses privacy friendly analytics that count visits without cookies and without tracking individuals across other websites. No advertising or profiling cookies are used.
For website enquiries, my lawful basis is legitimate interests: responding to someone who has contacted me about therapy. For client records, my lawful basis is contract and legal obligation, and for health related information the additional condition is the provision of health or social care under Article 9(2)(h) of the UK GDPR.
If you go on to become a client, I keep brief session notes and contact details. These are stored separately, securely and kept confidential. Notes are retained for seven years after therapy ends, in line with professional guidance, and then securely destroyed.
What you share in therapy is confidential. There are a small number of standard exceptions that all therapists work within, including where there is a serious risk of harm to you or another person, or where disclosure is required by law. My work is discussed anonymously in clinical supervision, which is a professional requirement, and your identity is not shared.
I do not sell your information or share it for marketing. The service providers named above process data on my behalf under their own data protection terms. Information may be shared with others only in the limited circumstances described under confidentiality above.
If you contact me but do not go on to work with me, I delete your enquiry within twelve months.
You have the right to ask for a copy of the information I hold about you, to have inaccurate information corrected, to ask for information to be deleted where there is no ongoing legal or professional reason to keep it, and to object to how it is used. Please email me and I will respond within one month.
If you are unhappy with how I have handled your information, you can raise it with the Information Commissioner's Office at ico.org.uk.
This notice was last updated in August 2026.