Kym Winter

Psychotherapy, counselling, supervision in St Albans, Herts
All enquiries:  01727 752147


Privacy Notice

In contacting KymWinterTherapy, using my services or visiting my website, your right to privacy and confidentiality is taken seriously. This notice outlines how I use and process any information I collect from you electronically, or that you provide to me for the purposes of accessing and using my services. Use of this site and my services is predicated upon you being in agreement with this notice, so please read through and only continue to access this site or my services if you are in agreement with the contents of this notice. Under GDPR Regulations I am obliged to provide you with information regarding the collection, use and storage of your Data, so please read through the below carefully.

When you make contact with me to arrange an appointment, I will also provide you (either at that point of contact, or in the initial consultation ) with additional information regarding Confidentiality, Record-keeping and Information-Sharing that will form part of your ‘Therapy or Supervisory Agreement’. Please also visit my FAQ’s on this site for further information.

  1. The Type of Data I Collect
  2. i)information you provide initially for answering queries or making appointments (eg email address, name, phone number);

    ii) information for the purposes of your treatment or consultation regarding your personal situation and circumstances including sensitive information such concerning sexuality, religious affiliations and physical/mental health history that allow me both to understand, and explore, your difficulties with you in more depth;

     iii) some financial information as necessary for the processing of electronic payments should you choose that payment method. My website may also collect certain background information in order to allow me to monitor the frequency, and type of use of my website (see below).

  3. On making Initial Contact
  4. By making contact either by direct email, phone or my website enquiry form, you are agreeing to me processing the data that you provide for its appropriate purpose i.e. making an appointment, or contacting you to discuss this. Please be aware that e-mail is not a particularly secure medium, so bear this in mind with respect to how much personal or sensitive information you may wish to disclose at that point.

  5. Use of my website
  6. I use Google Analytics to evaluate the use of my website eg most popular pages, length of browsing time etc.  My service provider may also access certain information. As such, certain information will be used by these to ascertain trends etc. By using this website you are consenting to this process, so if you are not in agreement please navigate elsewhere. it should be noted that Google Analytics does not identify you personally.

  7. How I use your personal data
  8. For administration such as the making and scheduling of appointments; in notes and records for the purposes of reflection and good practice as outlined by my professional body The United Kingdom Council for Psychotherapy for statistical analysis in order to help me understand the use of my services over time.

  9. Storage of Your Data
  10. In accordance with professional guidelines, information such as your name, email address and contact numbers are stored separately from sensitive personal information about yourself or your situation They may be held on devices such as my passworded mobile phone, or my personal computer. Notes and records pertaining to your circumstances are stored in a secure, locked cabinet. These are destroyed 6 years after the end of your treatment in accordance with professional and legal guidelines.

  11. Confidentiality
  12. This is an essential part of the services I offer in order for you to speak freely about yourself or your situation. Any approaches by a third party will be raised with you when they are apparent, and your agreement to share any information about yourself with a third party expressly sought. The only exceptions to this are a) if there is reasonable cause to believe that there is significant harm likely to be imminent to yourself or another b) where there are reasonable grounds to believe that there is involvement with terrorism or money-laundering c)if specifically ordered to do so by a Court of Law.

    Please be aware that any medium we use to communicate (eg email, Skype, phone etc) is subject to its own privacy and confidentiality limitations.

  13. Your rights as a data subject
  14. At any point whilst I am in possession of, or processing your personal data, you have the following rights:

    • Of access – you have the right to request a copy of the information that I hold about you.
    • To rectification – you have a right to correct data that we hold about you that is inaccurate or incomplete.
    • To be forgotten – in certain circumstances you can ask for the data we hold about you to be erased from our records.
    • Right to restriction of processing – where certain conditions apply you have a right to restrict the processing.
    • Right of portability – you have the right to have the data we hold about you transferred to another organisation.
    • Right to object – you have the right to object to certain types of processing such as direct marketing.
    • Right to object to automated processing, including profiling – you also have the right not to be subject to the legal effects of automated processing or profiling.


    Should you request any of the above, I am obliged to ensure that it is yourself requesting the information and therefore two forms of ID will be requested in this regard. Response to your request will be provided within 30 days, and the decision to delete any data about yourself will also take into account issues such as safeguarding, legal and clinical concerns.

  15. Data Breaches
  16. Should a data breach become apparent, you and the ICO will be notified within 72 days in accordance with their stipulations.

    If you have any queries or concerns about any of the above, please do contact myself (nb I am in this instance the Data Controller and Data Protection Officer for KymWinterTherapy) on:
    01727 752147 or
    or write to me at
    Flat 4, 150 St Albans Road, Sandridge, St Albans , Herts AL4 9LP.

    Please check my website intermittently for any changes to this notice






UK Council for PsychotherapyCOSRT logo 200Kym Winter Counselling and Psychotherapy
St Albans Road, St Albans, Herts AL4 9LP. 
Email:  Tel: 01727 752147

Home | About me | Services | Consultancy | FAQs | Contact details

website by realcom