Data Protection

Your Privacy Matters

I am committed to protecting your personal data and respecting your privacy. This notice explains how I collect, use, and protect your personal information, in line with the UK General Data Protection Regulation (UK GDPR) and the EU General Data Protection Regulation (EU GDPR).

Why I Collect Your Information

I collect your personal data to provide a safe, ethical and professional counselling service. This includes your contact details for appointment scheduling and communication, and brief session notes to support continuity of care. 

I use your personal data to:

• Deliver online counselling sessions

• Communicate with you about appointments and services

• Maintain accurate and confidential clinical records

• Comply with legal or regulatory requirements

What I Collect and How It Is Used

• Name and contact details: for communicating about sessions only.

• Session notes: brief, factual notes used to support therapy. 

• Payment Information: to process payment.

How Your Information Is Stored

All data is securely stored and in accordance with EU General Data Protection Regulations (GDPR) . Electronic data is protected through password security in two layers. Paper records (if there are any) are kept in a locked cabinet and coded for identity protection. 

As I am based in Europe and work with UK clients, your data is transferred from the UK to the EU. The UK has granted the EU an adequacy decision, meaning your data is protected to equivalent standards. 

When Data Might Be Shared

Your data will only be shared if I am required by law (in compliance with a court order, concerns over child protection and information or knowledge regarding fraus, drug trafficking or acts of terrorism)

Unless the risk is immediate, this will be discussed with you before appropriate disclosure.

Data Retention 

• Contact details: kept for up to 1 year after our work ends 

• Session notes: kept securely for up to 7 years, then deleted or destroyed 

Your Rights 

You have the right to access, request correction of incorrect or incomplete data , erase, or transfer your personal data, and to withdraw consent at any time (unless I am legally required to retain certain information). 

Data Controller

I, Milo Nass, am the data controller for the personal data you provide during our counselling sessions. If you have any questions or concerns about how your data is handled, please feel free to contact me at pinkpengiuncounselling@gmail.com or milo.nass@protonmail.com .