Legal

Privacy Policy

Last updated: 26 January 2026

Who I Am

Northpoint Therapies is a private therapy practice created and run by Gemma Branion, an accredited Cognitive Behavioural Therapist.

For the purpose of data protection law (UK GDPR and Data Protection Act 2018), I am the data controller of your personal information.

My Professional Standards

I am an accredited cognitive behavioural therapist and adhere to the professional and ethical standards of the British Association for Behavioural and Cognitive Psychotherapies (BABCP).

This means I am committed to:

  • Maintaining confidentiality
  • Keeping secure and accurate records
  • Handling personal data responsibly
  • Working within professional, ethical, and legal frameworks

What Information I Collect

I collect personal information that is necessary for providing therapy services and risk assessments. This may include personal details such as:

  • Name, date of birth, address
  • Phone number and email address
  • GP details and emergency contact

Because therapy involves health information, I may also collect sensitive personal data (Special Category data), including:

  • Information about your mental and physical health
  • Session notes and risk information
  • Relevant personal history

This is classed as Special Category data under UK GDPR.

How I Use Your Information

Your information is used to:

  • Provide safe and effective therapy
  • Communicate with you about appointments
  • Keep clinical records
  • Manage risk appropriately
  • Meet professional and legal obligations
  • Support clinical supervision (see below)

I only collect information that is relevant to your therapy.

Lawful Basis for Processing

Under UK GDPR, I rely on the following lawful bases:

  • Provision of healthcare
  • Contract
  • Legal obligations
  • Legitimate interests (safe, ethical practice)

For Special Category data (health data), processing is necessary for the provision of health treatment.

Confidentiality

Everything discussed in therapy is treated as confidential. However, confidentiality may be broken if:

  • There is risk of serious harm to you or someone else
  • There are safeguarding concerns involving a child or vulnerable adult
  • Disclosure is required by law (e.g. court order, terrorism, serious crime)

Where possible, this would be discussed with you first.

Supervision

As required by BABCP ethical guidelines, I attend professional supervision. I may discuss aspects of my work with my supervisor to ensure safe and effective practice. Your identity is not shared unless there is significant risk or legal reason to do so.

How Your Data is Stored

Your information is stored securely:

  • Electronic records are password protected and stored on an encrypted device
  • Video or audio recordings are password protected and stored on an encrypted device
  • Paper notes (if used) are stored in locked cabinets
  • Devices are kept secure at all times
  • I secure email and systems where possible

I take reasonable steps to prevent loss, misuse, or unauthorised access to your data.

How Long I Keep Records

In line with professional guidance and insurance requirements, therapy records are usually kept for:

  • 7 years after therapy ends
  • For children and young people - typically until the age of 25

After this time, records are securely destroyed.

Sharing Information

Your information will not be shared without your consent, except when:

  • Required by law
  • There is serious risk of harm
  • Safeguarding duties apply
  • Clinical supervision (as described above)

I do not sell or use your data for marketing purposes.

Your Rights

Under data protection law, you have the right to:

  • Access your data
  • Request correction of inaccurate data
  • Request erasure (in some circumstances)
  • Restrict or object to processing
  • Lodge a complaint with the Information Commissioner's Office (ICO)

You can contact the ICO at ico.org.uk. You would normally contact me first to resolve any concerns.

Website Data

If you contact me through my website, I may collect your name, email address, and any information you choose to provide. This information is used only to respond to your enquiry. My website may use basic cookies for functionality.

Contact

If you have any questions about this privacy policy or how your data is handled, please get in touch: