Privacy Policy

Where I am based

I am an online practitioner working exclusively with clients across the UK. Sessions are conducted remotely via a secure encrypted video platform. Your session notes and our correspondence are held on UK or EEA based encrypted systems.

Two of the services I use to run the practice, the video platform and the booking tool, are based in the United States. What that means in practice is set out in the section on services below. My own records of our work, including session notes, stay on UK or EEA based systems.

Legal jurisdiction

This practice operates under the laws of England and Wales. In the event of any dispute or legal matter arising from our work together, UK law applies. By engaging with Sabrin Therapy you agree that any legal proceedings will be conducted under English and Welsh jurisdiction. This is made clear in the working agreement provided to all clients at the start of our work together.

Who I am

I am Sabrin Daoud, an integrative counsellor (psychodynamic and person-centred) practising as Sabrin Therapy. I am a registered member of the British Association for Counselling and Psychotherapy (MBACP) and I adhere to their Ethical Framework.

For data protection purposes I am the data controller. You can contact me at: info@sabrintherapy.co.uk

I am registered with the Information Commissioner's Office (ICO) as required under UK GDPR.

What information I collect

I collect and hold only the information necessary to provide a safe and effective counselling service. This includes:

• Your name and contact details (email address)
• Information you share about your personal circumstances and mental health during our sessions
• Brief session notes that I keep for my own professional records
• Any written communication between us (such as emails)

How I use your information

Your information is used only to provide counselling services to you. I will never sell, share, or pass your personal data to third parties for marketing or commercial purposes.

The legal basis for processing your data is the provision of a health service under UK GDPR, specifically the legitimate interest of providing therapeutic support and my legal obligations as a registered counsellor.

Confidentiality

Everything you share in our sessions is confidential. I will not discuss our work with anyone outside of clinical supervision without your explicit consent.

There are a small number of exceptional circumstances in which I may be required to break confidentiality. These are:

• If I believe there is a serious and immediate risk to your life or the life of another person
• If I receive a court order requiring disclosure
• If there is a disclosure involving the abuse or serious risk to a child or vulnerable adult
• If information is shared relating to terrorism or money laundering as required by law

In all cases, I would endeavour to speak with you about this first wherever it is safe and appropriate to do so.

Clinical supervision

As required by the BACP Ethical Framework, I work under regular clinical supervision. I may discuss aspects of our work with my supervisor in order to ensure I am supporting you as effectively and safely as possible. This is done on an anonymised basis. Your name and identifying details will not be shared.

How I store your data

Your personal data is stored securely on encrypted systems based in the UK or EEA. Session notes are kept in a secure, password-protected format. Emails are stored in an encrypted email account linked to this practice via Google Workspace, with data region set to the EU and UK.

I do not store personal data on unencrypted devices or use unsecured cloud services for client information. Session notes and clinical records are not transferred outside the UK or EEA.

How long I keep your data

I retain client records for a period of seven years following the end of our work together, in line with professional guidance. After this period, records are securely destroyed.

Your rights

Under UK GDPR you have the right to:

• Access the personal data I hold about you
• Request correction of inaccurate information
• Request erasure of your data (subject to my legal and professional obligations)
• Object to or restrict how I process your data
• Withdraw consent at any time (where consent is the basis for processing)

To exercise any of these rights, please contact me at info@sabrintherapy.co.uk. I will respond within one month.

If you are unhappy with how I have handled your data, you have the right to raise a concern with the Information Commissioner's Office at ico.org.uk.

Online sessions

Sessions are held on Doxy.me, a video platform built for healthcare. You don't need an account or any software: I send you a link, and you join from your browser. I recommend joining from a private space where you cannot be overheard.

Services I use

Running the practice involves a small number of third party services. These act as data processors, meaning they handle information on my instructions and are not permitted to use it for their own purposes.

• Google Workspace hosts my email. The data region is set to the EU and UK.
• Doxy.me is the platform our sessions are held on. It is built for healthcare, holds SOC 2 Type 2 certification, and encrypts sessions in transit. The company is based in the United States and processes data there. I do not record sessions, so there is no recording of our conversations held anywhere, by me or by them.
• Calendly handles bookings for the free introductory call. If you book a call, the name, email address and time zone you enter go to Calendly, which is based in the United States. Any transfer outside the UK is covered by the safeguards in their data processing terms. Calendly sets its own cookies on its own booking page, which is separate from this website. If you would rather not use it, email me instead and I will offer you a time directly.
• The company hosting this website stores the site's files and keeps standard server logs. No personal data about you is stored there.

My notes about our work are never entered into any of these services. They are kept separately, on encrypted UK or EEA based systems.

This website

This website sets no cookies and uses no tracking or analytics software. Nothing you do here is recorded or measured.

No personal data is collected through the website itself. The contact form does not send anything anywhere on its own: it simply opens your own email app with a message ready for you to send, so your enquiry travels directly from your email account to mine. The booking button takes you to Calendly, as described above.

Changes to this policy

I may update this policy from time to time. The most current version will always be available on this page.

Professional standards

As a registered MBACP member I adhere to the BACP Ethical Framework for the Counselling Professions (2018). This includes commitments to putting clients first, working with integrity, maintaining confidentiality, and working to professional standards. My practice as an online practitioner also follows BACP's Good Practice in Action guidance on working online. A copy of the BACP Ethical Framework is available at bacp.co.uk.

Questions

If you have any questions about how I handle your personal information, please do not hesitate to get in touch: info@sabrintherapy.co.uk