top of page

Privacy & Confidentiality Policy

Last updated: February 2026                                                                                                                                         Back to homepage

​

Your privacy is very important to me, particularly because therapy involves sharing personal and sensitive information. This policy explains how I collect, use, and protect your personal data, in line with UK data protection law and professional standards, including those of the BABCP.

​

Who I am

I am Megan French, a solo therapist trading as Shorepath Therapy, based in the UK.

I am the data controller for the personal information I collect.

Contact details:

 

What information I collect

Information you provide

When you contact me, book sessions, or work with me, I may collect:

  • Name

  • Email address

  • Phone number

  • Postal address

 

Therapy-related information (special category data)

If you become a client, I may also collect and store:

  • Information shared during therapy sessions

  • Assessment or intake information

  • Brief session notes

This information is classed as special category (health) data under UK GDPR and is handled with a high level of confidentiality and care.

 

Payments

Payments are processed securely through Stripe.
I do not store full card details. Stripe processes payment data in line with their own privacy policy.

 

Website analytics

I use website analytics (such as Google Analytics) to understand how visitors use my website. This may collect:

  • IP address

  • Device and browser information

  • Pages visited and time spent on the site

This information is used only to improve the website and does not personally identify you.

 

How I use your information

I use your information to:

  • Respond to enquiries

  • Provide therapy services

  • Manage appointments and payments

  • Maintain appropriate client records

  • Meet legal, ethical, and professional obligations

  • Improve my website and services

I do not sell or use your data for marketing without your consent.

Legal basis for processing

​

Under UK GDPR, I rely on the following lawful bases:

  • Consent – for therapy work and processing special category (health) data

  • Contract – to provide therapy services and take payment

  • Legitimate interests – for running and improving my practice

  • Legal obligation – where record-keeping is required by law or professional bodies

You may withdraw consent at any time, unless I am legally required to retain certain information.

 

Confidentiality and sharing information

Your information is treated as confidential.

I only share personal data when:

  • It is necessary to provide services (e.g. payment processing via Stripe)

  • I am legally required to do so

  • There is a serious risk of harm to you or others

  • You give explicit consent

Any third parties are required to handle your data securely and lawfully.

 

Cookies

This website uses cookies to:

  • Ensure the site works properly

  • Understand how visitors use the site

You can manage cookies via your browser settings.

How long I keep your data

I keep personal and therapy-related information only as long as necessary and in line with:

  • UK legal requirements

  • Professional and ethical guidance (including BABCP standards)

Client records are stored securely and deleted when no longer required.

​

Your rights

You have the right to:

  • Access your personal data

  • Request correction of inaccurate data

  • Request deletion of data (where legally possible)

  • Restrict or object to processing

  • Withdraw consent at any time

To exercise your rights, contact me at shorepaththerapy@outlook.co.uk.

You also have the right to complain to the Information Commissioner’s Office (ICO).

 

Data security

I take appropriate technical and organisational measures to protect your data from loss, misuse, unauthorised access, or disclosure.

 

Changes to this policy

This policy may be updated from time to time. The latest version will always be available on this website.

 

Confidentiality Policy

Confidentiality is a core part of my work as a therapist and is maintained in line with BABCP ethical and professional standards.

 

Confidentiality in therapy

Everything discussed in therapy sessions is treated as confidential. Information is stored securely and only accessed by me.

​

Limits to confidentiality

There are some rare circumstances where confidentiality may need to be broken. These include:

  • If there is a serious risk of harm to you or someone else

  • If I am legally required to disclose information (e.g. by a court order)

  • If safeguarding concerns arise involving a child or vulnerable adult

Where possible, I will aim to discuss this with you before any disclosure is made.

​

Supervision

As required by BABCP, I attend clinical supervision.
Client work may be discussed anonymously in supervision to ensure safe and effective practice. No identifying information is shared.

​

Record keeping

I keep brief therapy notes to support my clinical work. These are:

  • Stored securely

  • Kept separate from identifying details where possible

  • Retained only for as long as required by law and professional guidance

 

Your questions

If you have any questions about confidentiality or how your information is handled, you are welcome to discuss this with me at any time.

bottom of page