Privacy Policy

Introduction

Your privacy is very important to me. This Privacy Policy explains how I, Rebecca MacKillop, trading as Anxiety Therapy Glasgow, collect, use, store, and protect your personal information.

I adhere to the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, and the Privacy and Electronic Communications Regulations (2003).

You can be confident that any personal information you share with me will be kept safe, secure, and used only for the purpose for which it was provided.

If you have any questions about this Privacy Policy or how I handle your data, please contact me at:
📧 rebecca@brainbotanics.com

Who I Am

Data Controller:
Rebecca MacKillop, trading as Anxiety Therapy Glasgow
ICO Registration Number: 00019647507

As the data controller, I am responsible for deciding how and why your personal data is collected and used.

What Information I Collect and Why

I collect and process personal data to provide counselling and psychotherapy services safely, ethically, and effectively.

1. When you contact me

When you make an enquiry or book a consultation (via my website, email, or Calendly), I may collect:

  • Your name

  • Email address

  • Telephone number

  • Any other details you choose to share in your enquiry

Lawful basis:

  • Legitimate interests – to respond to your enquiry and arrange appointments.

  • Contract – to provide you with therapy services if you decide to work with me.

If you decide not to proceed, I will delete your personal data within one month.

2. During our work together

Before therapy begins, I will ask you to complete a client information form to ensure I can provide an appropriate and safe service. This may include:

  • Contact details

  • Emergency contact information

  • Relevant health or background information

Throughout therapy, I also keep session notes for professional and ethical reasons. These are brief factual notes to support your therapeutic process.

Lawful basis:

  • Contract – to deliver the therapy service you have requested.

  • Special category data (health information) – processed under Article 9(2)(h) of the UK GDPR (provision of health treatment and management).

How I Store and Protect Your Information

I take your confidentiality and data security seriously.

  • All client forms and therapy notes are stored digitally on a password-protected, encrypted device.

  • Your contact details are stored securely and separately from session notes.

  • Any emails are kept within a password-protected email account (Gmail).

  • Zoom is used for online sessions; I do not record sessions.

  • Your information is never shared with third parties unless legally required (see below).

I regularly review my data security measures and keep software up to date.

Confidentiality and When It May Need to Be Broken

Everything you share in therapy is confidential. I will not share your information with anyone unless:

  • I believe you or someone else is at risk of serious harm;

  • I am legally required to disclose information (e.g. by a court of law); or

  • Information is discussed anonymously in professional supervision, as required by ethical guidelines from the National Counselling & Psychotherapy Society (NCPS).

Where possible, I will always discuss this with you first.

How Long I Keep Your Information

  • Client records (forms and session notes) are kept for three years after therapy ends, in line with good practice and ethical guidance from the NCPS.

  • After that period, all digital records are securely deleted.

  • Emails and messages are deleted when no longer necessary.

Your Rights

Under UK data protection law, you have the following rights:

  • Access – to request a copy of the personal data I hold about you.

  • Rectification – to request corrections to inaccurate or incomplete data.

  • Erasure – to request deletion of your data (“the right to be forgotten”).

  • Restriction – to limit how I use your data.

  • Portability – to request that your data be transferred to another service provider.

  • Objection – to object to how your data is processed.

If you wish to exercise any of these rights, please contact me at rebecca@brainbotanics.com.
If you are unhappy with how I handle your data, you have the right to complain to the Information Commissioner’s Office (ICO) at www.ico.org.uk.

Website and Cookies

My website is hosted by Squarespace, which uses cookies and analytics tools to improve functionality and performance. I also use Google Analytics to understand how visitors use my website and to help me improve it.

Cookies collect non-identifiable information such as:

  • Your device type and browser

  • Pages visited and time spent on the site

  • How you arrived at the site

You can manage or disable cookies in your browser settings.
For more information, see Squarespace’s Privacy Policy and Google’s Privacy Policy.

Online Appointments

All sessions take place online via Zoom. I do not record sessions, and Zoom provides end-to-end encryption for security. However, please note that no online communication can be 100% secure. You are encouraged to find a private, safe space for sessions.

Bookings

I use Calendly for scheduling free consultations. When you book via Calendly, they collect your name, email address, and appointment details.
Please see Calendly’s Privacy Policy for more information about how they handle data.

Payments

Payments for therapy sessions are made by direct bank transfer. I do not collect or store any financial details on my website.
Any payment information shared with your bank is handled in accordance with their own privacy and security policies.

Changes to This Privacy Policy

I may update this Privacy Policy from time to time to reflect service changes or legal requirements. Any updates will be posted on this website, and the date above will be revised.

Contact:
📧 rebecca@brainbotanics.com
👩‍💼 Rebecca MacKillop – Anxiety Therapy Glasgow
ICO Registration: 00019647507