Privacy Policy

Last updated: September 2026

Who I am

I am Rebecca Mills, an integrative counsellor and therapist based in Twickenham, London Borough of Richmond upon Thames. I operate as a sole trader and am the data controller for the personal information you share with me.

You can contact me at: rebeccajmills@me.com

What information I collect

When you make an enquiry or book an appointment, I may collect:

• Your name and contact details (email address, phone number)
• Information about what has brought you to therapy
• Emergency contact details (once we begin working together)
• Session notes and records of our therapeutic work
• Payment information (invoices and records of fees paid)

Why I collect it

I collect this information in order to:

• Respond to your enquiry and arrange appointments
• Provide you with counselling and therapy services
• Keep records as required by my professional body (BACP) and for clinical supervision
• Meet my legal and ethical obligations as a practitioner

The lawful basis for processing your data is legitimate interests (for initial enquiries) and contract (once we have agreed to work together). Sensitive personal data such as health information is processed on the basis of explicit consent.

How long I keep your information

I keep client records for seven years after our last session, in line with BACP guidance. Enquiries that do not proceed to therapy are deleted within six months.

Who I share your information with

I do not sell or share your personal data with third parties for marketing purposes. I may share information in the following limited circumstances:

• Clinical supervision: I discuss my work with a qualified supervisor as required by my professional body. This is done without using your full name.
• Legal or safeguarding obligations: If I have serious concerns about your safety or the safety of others, I may need to share information with relevant authorities.
• Sessionly: I use Sessionly (sessionly.uk) to manage appointments and enquiries. They process data on my behalf and have their own privacy policy.

Your rights

Under UK GDPR you have the right to:

• Access the personal data I hold about you
• Request correction of inaccurate data
• Request deletion of your data (subject to legal and professional obligations)
• Object to or request restriction of processing
• Withdraw consent at any time (where consent is the basis for processing)

To exercise any of these rights, please contact me at rebeccajmills@me.com.

Complaints

If you have concerns about how I handle your data, you can contact the Information Commissioner's Office (ICO) at ico.org.uk or by calling 0303 123 1113.

Cookies

This website does not use tracking cookies or analytics. The only third-party content is the Sessionly booking and enquiry form, which is subject to Sessionly's own cookie policy.

Changes to this policy

I may update this privacy policy from time to time. Any changes will be published on this page.