Privacy Policy
Last updated 25/06/2026
Chai Therapy is committed to protecting your privacy and handling your personal information with care, respect and confidentiality.
This privacy policy explains how I collect, use, store and protect personal information when you visit my website, contact me about counselling, or engage in therapy with me.
I am the Data Controller for the personal information I process:
As a sole practitioner, I am responsible for ensuring your personal information is handled in accordance with UK data protection legislation, including the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
Contact
If you have questions about this privacy policy or how your information is handled, please contact:
Gemma Brown – Chai Therapy
gemma@chai-therapy.co.uk
Information I collect
Website enquiries
If you contact me through my website contact form, I may collect:
- Your name
- Your email address
- Your telephone number
- Any information you choose to include in your contact form, email, Whatsapp or text message.
Therapy information and client records
If you choose to work with me, I collect and process information necessary to provide safe and ethical counselling support.
This may include:
- Contact details
- Appointment information
- Brief therapy notes relating to themes discussed in sessions
- Information relating to risk, safeguarding concerns, or actions taken where relevant
How I use your information
I use your personal information to:
- Respond to enquiries
- Arrange and manage appointments
- Provide counselling services
- Maintain appropriate professional records
- Support safe therapeutic practice
- Meet ethical and legal responsibilities
Your information is only used for purposes connected with your therapy or enquiry unless I am legally required to use it for another reason.
How your information is stored
Your information is stored securely using an encrypted practice management system.
I take reasonable steps to protect your personal information from loss, misuse, unauthorised access, alteration or disclosure.
How long I keep your information
I retain personal information and therapy records for as long as necessary to meet professional, ethical and legal responsibilities.
After this period, information is securely deleted or destroyed.
Your rights
Under UK GDPR data protection law, you have rights regarding your personal information, including:
- The right to request access to information I hold about you
- The right to request correction of inaccurate information
- The right to request deletion of information where appropriate
- The right to object to certain processing
Requests can be made by contacting me using the details above.
Please note that some information may need to be retained to meet professional or legal obligations.
Appointment booking and payments
I may use third-party services to support appointment booking and payments, including:
- Calendly for appointment scheduling
- PayPal where this is helpful, particularly for clients making international payments
- Bank transfers for most UK-based payments
These organisations process information according to their own privacy policies.
Online counselling and third-party services
Where sessions take place online, I may use:
- Google Meet
- Psychology Today “Sessions” platform
These services have their own privacy policies and data protection practices.
My website also contains links to external websites. I am not responsible for their privacy practices.
Website hosting and maintenance
My website is maintained by Web Genie.
Website hosting providers may process limited technical information required to operate and maintain the website.
Cookies and website analytics
My website may use cookies or similar technologies to support website functionality and improve user experience.
Confidentiality and safeguarding
Confidentiality is an essential part of the therapeutic relationship. Information shared within counselling is treated as private and confidential.
There are some situations where confidentiality may need to be limited, including where:
- There is a serious concern about your safety or the safety of another person
- There is a safeguarding concern
- I am required to share information by law
- Information is required as part of professional accountability processes
Where possible, I would aim to discuss this with you before sharing information.
Changes to this policy
This policy may be updated from time to time. Please check this page for any updates.