Privacy Notice Last updated: 24/02/2026

1. Purpose and Scope of This Privacy Notice
This Privacy Notice explains how personal data is handled end‑to‑end, from the point you first make contact via this website, through any psychotherapy relationship, and after therapy has ended.
It applies to: - visitors to this website - people making enquiries about psychotherapy services - current and former psychotherapy clients
This notice is written in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018, and reflects professional ethical obligations applicable to psychotherapy practice in the UK.


2. Data Controller
The data controller responsible for personal data is:
Bulgun Suchinova
UK‑based Psychotherapist
Website: https://suchinova.com
Email: b.suchinova@gmail.com


3. Lawful Basis for Processing Personal Data
Personal data is processed on the following lawful bases:

• Contract – where you are currently in psychotherapy or considering entering into psychotherapy
• Legitimate interests – to respond appropriately to enquiries and manage professional records after therapy has ended
• Consent – where you voluntarily provide information (for example, via the contact form)
• Legal obligation – where record‑keeping or disclosure is required by law or professional regulation
• Special category data - where therapy is provided, personal data may include special category data relating to health. This data is processed solely for the purpose of providing psychotherapy services and in accordance with applicable legal and ethical standards.

4. What Personal Data Is Collected
Depending on your interaction with the practice, the following data may be collected:
Identifiable data

• Name and contact details (email address, telephone number)
• Information you choose to share in enquiries or communications
• Financial information required for invoicing and accounting purposes

Therapy‑related data

• Brief factual session notes
• Administrative records relating to appointments and attendance

Therapy notes are kept anonymous and minimal. Where supervision is undertaken, all identifying details are removed so that clients cannot be identified.

5. How Personal Data Is Used
Personal data is used for the purposes of:

• Responding to enquiries
• Arranging and providing psychotherapy services
• Managing professional records
• Meeting legal, ethical, and professional obligations

Personal data is not used for marketing purposes and is not shared with third parties except where required by law, professional obligation, or with your explicit consent.

6. Data Storage and Security
All reasonable technical and organisational measures are taken to protect personal data from unauthorised access, loss, or misuse.

• Electronic records are stored securely and protected by passwords and encryption where appropriate
• Access to personal data is restricted to the therapist

Electronic records may be stored on password‑protected devices and secure third‑party services used for professional practice (such as email or secure storage). All such services are selected with regard to UK GDPR and data‑protection obligations.

7. Confidentiality and Disclosure
All communications and records are treated as confidential in accordance with professional ethical standards.
Confidentiality may be broken only where there is a legal obligation to do so, for example, where there is a risk of serious harm to you or others.
This includes situations involving safeguarding obligations relating to children or vulnerable adults.
In the event of the therapist’s incapacity or death, limited access to contact information may be granted to the therapist’s clinical executors, as appointed under the therapist’s Professional Will, for the sole purpose of:

• notifying clients appropriately, and
• ensuring that personal data and therapy records are handled and securely deleted in accordance with legal and professional obligations.

Financial records may be disclosed where necessary to comply with tax, legal, or regulatory requirements. Any such disclosure is limited to the minimum information required.

8. Data Retention
Personal data is retained only for as long as necessary and in accordance with professional and legal requirements:

• Enquiry‑related communications (emails, text messages) are deleted when no longer required, and typically no later than three months after an enquiry if therapy does not commence
• Therapy session notes are retained for a period consistent with professional guidance, after which they are securely deleted
• Financial records are retained for six years in accordance with HMRC requirements, after which they are securely deleted

9. Your Rights Under UK GDPR
You have the right to:

• Request access to your personal data
• Request correction of inaccurate data
• Request erasure of your data (where applicable)
• Object to or restrict processing
• Request data portability (where applicable)

Requests will be responded to within one month. You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO).

10. Data Breaches
In the event of a personal data breach, appropriate action will be taken in accordance with legal requirements. Where required by law, relevant breaches will be reported to the Information Commissioner’s Office and to affected individuals.

11. Electronic Communication
Please note that email and electronic messaging are not fully secure forms of communication. You are free to choose how you communicate and may raise any concerns about communication methods at any time.

12. Cookies and Website Data
This website does not intentionally use tracking cookies or analytics tools that collect personal data. If this changes, this Privacy Notice will be updated accordingly.

12. Changes to This Privacy Notice
This Privacy Notice may be updated from time to time. The most recent version will always be available on this website.

13. Contact
If you have any questions about this Privacy Notice or how your personal data is handled, please contact:
Bulgun Suchinova
Email: b.suchinova@gmail.com