1. Introduction

I am committed to protecting your privacy and handling your personal information with transparency and care. This Privacy Notice explains what personal data I collect, why I collect it, how I use it, and your rights under the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, and the guidance of the Information Commissioner’s Office (ICO).

I am the Data Controller for all personal data you share with me.

Data Controller:

Name: Zenobia Italia

Trading Name: It’s Your Agenda

Email: [Your email]

Phone: 07349 158 891

Address: Available upon request

_________________________________________________

2. What Personal Data I Collect

A. Identification and Contact Information

- Name

- Address

- Date of birth (if relevant)

- Phone number

- Email address

B. Emergency and Safety Information

- Emergency contact details

- GP or healthcare provider information

- Relevant risk or safeguarding information

C. Health Information (Special Category Data)

Medication you are taking

- Mental or physical health information relevant to therapy

- Reasons for seeking counselling

- Any information you choose to share during sessions

D. Administrative Information

- Client contracts

- Assessment forms

- Emails and messages

- Attendance records

- Invoices and payment records (no card details are stored)

E. Website Contact Form

If you contact me through my website form, I receive whatever information you submit, such as name, email, and message content.

My website does not use cookies.

_________________________________________________

3. How Your Information Is Stored

- All personal data is stored electronically on a password-protected computer.

- Contracts, assessment forms, and other documents are stored securely in electronic format.

- I do not keep written session notes.

- Email communication is conducted through encrypted email to protect your information.

- I use a professional supervisor. Any material I share in supervision is fully anonymised and non-identifiable.

_________________________________________________

4. Lawful Basis for Processing

Under the UK GDPR, I rely on the following lawful bases:

A. Contract (Article 6(1)(b))

To provide counselling services and communicate with you.

B. Legitimate Interests (Article 6(1)(f))

To manage my practice, such as scheduling, supervision, record-keeping, and responding to enquiries.

C. Vital Interests (Article 6(1)(d))

If I need to share information to protect your life or someone else’s.

D. Special Category Data (Article 9(2)(h))

For the provision of healthcare (counselling).

I also rely on explicit consent (Article 9(2)(a)) for processing health-related information that you choose to share.

_________________________________________________

5. Who I May Share Your Information With

Your information is confidential. I may share it only under the following circumstances:

A. Serious Risk of Harm

If I believe you or someone else is at serious risk of harm, I may need to share relevant information with your GP, emergency services, or other professionals.

B. Legal Obligations

If compelled by a court or law enforcement with lawful authority.

C. Professional Supervision

I work with a supervisor to ensure safe, ethical practice. Any discussion of client work is fully anonymised, and no identifying details are disclosed.

I will never sell your data or share it for marketing purposes.

_________________________________________________

6. How Long I Keep Your Information

I retain your personal data for up to 7 years from your final session, in line with professional, ethical, and insurance requirements.

After this period, your data will be securely deleted.

If you request deletion sooner, I will comply where legally and ethically possible.

_________________________________________________

7. Your Rights Under the UK GDPR

You have the right to:

- Access the personal data I hold

- Correct inaccurate information

- Request erasure of your data (in certain circumstances)

- Restrict how I process your data

- Object to certain types of processing

- Withdraw consent where consent is the legal basis

- Request data portability (if applicable)

To exercise your rights, please contact me using the details above.

You may also raise a concern with the UK’s Information Commissioner’s Office:

www.ico.org.uk

_________________________________________________

8. Website Information

My website does not use cookies.

If I change this in future, I will update this notice and provide a clear cookie banner.

Your contact form submissions reach me via email and are handled in line with this Privacy Notice and my encrypted email processes.

_________________________________________________

9. Updates to This Privacy Notice

This notice may be updated occasionally. The most recent version will always be available on my website.