Privacy Policy

Last updated: 25 July 2026

This privacy notice explains how Sue Cook collects, uses and protects personal information when you visit this website, make an enquiry or arrange counselling, psychotherapy, EMDR or supervision.

Who is responsible for your information

Sue Cook is the data controller for the personal information used in her independent practice.

• Practice address: 39 Grosvenor Place, Bath, BA1 6BA
• Telephone or text: 07860 701300
• Online contact: Contact Sue securely through this website

Information that may be collected

The information collected depends on how you contact Sue and whether you decide to work together. It may include:

• your name, contact details and preferred way to be contacted;
• information you include in an enquiry or contact form;
• appointment, payment and administrative information;
• information relevant to counselling, psychotherapy, EMDR or supervision, including health or other sensitive personal information you choose to share;
• professional notes and correspondence created as part of the work; and
• limited technical information needed to operate and protect the website.

Information about health, sex life, sexual orientation, beliefs or ethnicity may be classed as special category data and is given additional protection.

How information is used

Personal information may be used to:

• reply to enquiries and discuss availability;
• assess whether Sue’s service is appropriate for your needs;
• arrange, provide and review sessions;
• maintain appropriate professional and financial records;
• meet safeguarding, insurance, tax, legal and professional obligations; and
• keep the website and contact systems secure.

Lawful bases

The lawful basis depends on the purpose. It may include taking steps at your request before entering an agreement, performing the agreement with you, complying with legal obligations, and Sue’s legitimate interests in running a safe and effective professional practice.

Where special category data is used, Sue will also rely on an appropriate additional condition, such as your explicit consent or the provision of health or social care where applicable. You can ask Sue which basis applies to particular information.

Confidentiality and sharing

Your information is not sold and is not used for unrelated marketing. It is shared only where there is a clear professional, legal or operational reason.

This may include carefully selected service providers that support secure communications, website hosting, online sessions, record keeping or professional administration. Information may also be discussed in professional supervision, with identifying details reduced wherever possible.

Information may need to be disclosed if required by law or if a serious safeguarding or risk concern arises. Where appropriate and lawful, Sue will discuss this with you first.

Storage, security and retention

Reasonable technical and organisational measures are used to protect information against loss, misuse or unauthorised access. Access is limited to those who need it for an appropriate purpose.

Information is kept only for as long as it is needed for the purpose for which it was collected and to meet professional, insurance, tax or legal requirements. Different records may have different retention periods. Sue can explain the period that applies to your information.

If a service provider stores information outside the United Kingdom, appropriate contractual or legal safeguards will be used where required.

Your data protection rights

Depending on the circumstances, you may have the right to ask for access to your information, correction of inaccurate information, deletion, restriction, objection, or transfer of your information. Where processing relies on consent, you may withdraw that consent.

Some rights are subject to legal and professional exceptions. To make a request, use the contact page or write to the practice address above. Sue may need to confirm your identity before responding.

You also have the right to raise a concern with the Information Commissioner’s Office.

Website forms and links

Information sent through the contact form is used to respond to your enquiry. Please avoid including more sensitive detail than is necessary in an initial message.

This website links to external services and professional organisations. Their privacy practices are controlled by them, so please review their notices when leaving this website.

Changes to this notice

This notice will be reviewed when the practice, website or legal requirements change. The date at the top shows when it was last updated.