Privacy Notice
1.Introduction
I am committed to protecting your privacy and handling your personal information with transparency and care. This Privacy Notice explains what personal data I collect, why I collect it, how I use it, and your rights under the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, and the guidance of the Information Commissioner’s Office (ICO).
I am the Data Controller for all personal data you share with me.
Data Controller:
Name: Zenobia Italia
Trading Name: It’s Your Agenda
Email: [email protected]
Phone: 07349 158 891
Address: Available upon request
2. What Personal Data I Collect
A. Identification and Contact Information
- Name
- Address
- Date of birth (if relevant)
- Phone number
- Email address
B. Emergency and Safety Information
- Emergency contact details
- GP or healthcare provider information
- Relevant risk or safeguarding information
C. Health Information (Special Category Data)
Medication you are taking
- Mental or physical health information relevant to therapy
- Reasons for seeking counselling
- Any information you choose to share during sessions
D. Administrative Information
- Client contracts
- Assessment forms
- Emails and messages
- Attendance records
- Invoices and payment records (no card details are stored)
E. Website Contact Form
If you contact me through my website form, I receive whatever information you submit, such as name, email, and message content.
My website does not use cookies.
3. How Your Information Is Stored
- All personal data is stored electronically on a password-protected computer.
- Contracts, assessment forms, and other documents are stored securely in electronic format.
- I do not keep written session notes.
- Email communication is conducted through encrypted email to protect your information.
- I use a professional supervisor. Any material I share in supervision is fully anonymised and non-identifiable.
4. 4. Lawful Basis for Processing
Under the UK GDPR, I rely on the following lawful bases:
A. Contract (Article 6(1)(b))
To provide counselling services and communicate with you.
B. Legitimate Interests (Article 6(1)(f))
To manage my practice, such as scheduling, supervision, record-keeping, and responding to enquiries.
C. Vital Interests (Article 6(1)(d))
If I need to share information to protect your life or someone else’s.
D. Special Category Data (Article 9(2)(h))
For the provision of healthcare (counselling).
I also rely on explicit consent (Article 9(2)(a)) for processing health-related information that you choose to share.
5. Who I May Share Your Information With
Your information is confidential. I may share it only under the following circumstances:
A. Serious Risk of Harm
If I believe you or someone else is at serious risk of harm, I may need to share relevant information with your GP, emergency services, or other professionals.
B. Legal Obligations
If compelled by a court or law enforcement with lawful authority.
C. Professional Supervision
I work with a supervisor to ensure safe, ethical practice. Any discussion of client work is fully anonymised, and no identifying details are disclosed.
I will never sell your data or share it for marketing purposes.
6. How Long I Keep Your Information
I retain your personal data for up to 7 years from your final session, in line with professional, ethical, and insurance requirements.
After this period, your data will be securely deleted.
If you request deletion sooner, I will comply where legally and ethically possible.
7. Your Rights Under the UK GDPR
You have the right to:
- Access the personal data I hold
- Correct inaccurate information
- Request erasure of your data (in certain circumstances)
- Restrict how I process your data
- Object to certain types of processing
- Withdraw consent where consent is the legal basis
- Request data portability (if applicable)
To exercise your rights, please contact me using the details above.
You may also raise a concern with the UK’s Information Commissioner’s Office:
www.ico.org.uk
8. Website Information
My website does not use cookies.
If I change this in future, I will update this notice and provide a clear cookie banner.
Your contact form submissions reach me via email and are handled in line with this Privacy Notice and my encrypted email processes.
9. Updates to This Privacy Notice
This notice may be updated occasionally. The most recent version will always be available on my website.
