PRIVACY POLICY

Privacy Policy

Last Updated: 01/06/2026

At Sophie Bolam CBT, protecting your privacy and personal information is extremely important. This policy explains how your personal information is collected, used, stored, and protected when you visit this website or access therapy services.

Who I Am

Sophie Bolam CBT is a private Cognitive Behavioural Therapy practice providing online therapy, assessments, supervision, and related services.

For any questions regarding this policy, please contact:

Email:hello@sophiebolamcbt.com

Information I May Collect

I may collect:

  • Name

  • Email address

  • Telephone number

  • Information provided through enquiry forms

  • Appointment and booking information

  • Information shared during assessments and therapy sessions

  • Website usage data through cookies and analytics

How Your Information Is Used

Your information may be used to:

  • Respond to enquiries

  • Arrange appointments

  • Provide therapy and clinical services

  • Maintain accurate clinical records

  • Meet legal, ethical, and professional obligations

  • Improve website performance and user experience

Lawful Basis for Processing

I process personal information under the lawful bases of:

  • Consent

  • Contractual necessity

  • Legitimate interests

  • Legal obligations relating to healthcare practice

Clinical Records

If you become a therapy client, I will create and maintain confidential clinical records as required by professional and legal standards.

Clinical records are stored securely and access is restricted.

Confidentiality

Everything discussed within therapy is treated confidentially.

However, confidentiality may need to be broken if:

  • There is significant risk of harm to yourself or others

  • There are safeguarding concerns involving a child or vulnerable adult

  • Information is required by law or court order

Where possible, this would be discussed with you first.

Data Storage and Security

Reasonable steps are taken to ensure personal information is stored securely and protected against unauthorised access, loss, misuse, or disclosure.

Retention of Records

Clinical records are retained in accordance with professional guidance, legal requirements, and insurance recommendations.

Records are then securely destroyed.

Your Rights

Under UK GDPR, you have rights including:

  • Access to your information

  • Correction of inaccurate information

  • Restriction of processing in certain circumstances

  • Lodging a complaint with the Information Commissioner’s Office (ICO)

More information can be found at:

Information Commissioner's Office (ICO)

Changes to This Policy

This policy may be updated periodically. Any updates will be published on this page.