Data Protection & Privacy Policy

Any personal data provided by you to me, Wendy Nightingale, through any means (verbal, written or in electronic form,) will be held and processed in accordance with the data protection principles set out in the Data Protection Act 1998 and the General Data Protection Regulation for the purposes for which you have given consent, to provide the psychotherapeutic services that you have requested from me.



Wendy Nightingale (also trading as Mindful Change, the ’Data Controller‘, referred to below as ”I“, ”me“ or ”my“) is committed to protecting your privacy. Please read the following in order to learn more about my privacy policy and my information collection and use practices.

When you request psychotherapeutic services with me, you will be asked to consent to our processing of your data under the terms of this policy.

What information do I collect?

Initial enquiry Making an enquiry for an introductory appointment can be done by email or by phone. This process involves providing me with your name, preferred telephone numbers and email address. I may also request information on your availability, therapeutic issues, and other details which I deem relevant to processing your request.

Initial Appointments In an initial appointment I will ask about your current personal, social, medical circumstances. I will also ask about your background and family history, as well as the issues which are affecting you now. I require this information so that I can gauge whether I am able to help you and to provide the context for our psychotherapeutic work.

On-going Appointments Over time, I will ask about the issues which are affecting you now, you past life events and experiences in order to inform our psychotherapeutic work. I may also invite you to complete standard, therapeutic questionnaires, e.g. including but not restricted to CORE 10, HADS and PHQ-7.

Professional website I use analytics provided by 1-and-1 Internet Limited to collect anonymous data relating to web traffic statistics. The collection and use of this data by 1-and-1 Internet Limited is subject to their own Privacy Policies.

What do I use your information for?

I use information held about you in the following ways:

  • To provide clients with the professional psychotherapeutic services requested from me.
  • To offer appointments.
  • To notify you about changes to your appointments and other changes to my services.
  • To administer my service, including the arrangement of appointments, financial control and the handling of payments.
  • To improve my service to ensure that it is provided in the most effective manner for you and for me.
  • To fulfil my administrative, legal and contractual obligations in line with my professional bodies.

What information do I share?

I will not share any information about you with other organisations or people, except in the following situations:

Consent I may share your information with professional carers or others whom you have requested or agreed I should contact.

Serious harm I may share your information with the relevant authorities if I have reason to believe that this may prevent serious harm being caused to you or to another person.

Compliance with law I may share your information where I am required to by law or by the regulations and other rules to which I am subject.

Professional Executor I may share your contact information with a Professional Executor if I am incapacitated and/or unable to contact you in person. I have appointed a psychotherapist who, only under these circumstances, would contact you to discuss your needs and what course of action you may want to take.

How do I keep your information safe?

All information you provide to me is stored as securely as possible. All paper forms and correspondence are kept in locked filing cabinet in my home. All electronic records are stored on my own electronic devices, all access to which requires password-protected authentication, or by reputable service providers using secure internet cloud technology.

Unfortunately, the transmission of information via the internet is never completely secure. Although I will do my best to protect your information using industry-standard protocols and encryption, I cannot guarantee the security of your data transmitted to me via email; any transmission is at your own risk. Once I have received your information, I will use strict procedures and security features to try to prevent unauthorised access.

Your identifiable personal information is kept separately from any session notes and other descriptive material. Client notes and other documentation are destroyed 7 years after the end of counselling, which is a requirement of my professional insurance company.

Access to you information and correction

You have the right to ask me to provide a copy of the information held by me in my records. You also have the right to require me to correct any inaccuracies in your information. If you would like to do this, please contact me via the email below.

You may withdraw your consent for me to hold and process your data at any time. However, if you do this while actively receiving psychotherapeutic services from me, these services would have to end. You can withdraw your consent by contacting me via the email below.

Changes to my privacy policy

I may edit this policy from time to time. If I make any substantial changes I will notify you by posting a prominent announcement on my website.

How to contact me

Please contact me if you have any questions about your privacy policy or information I hold about you: Wendy Nightingale
mb 07811 073 255

Last updated April 2018