Privacy Policy
Last updated: 21/08/2026
About this privacy policy
This privacy policy explains how I collect, use and protect personal information when you visit my website, contact me about therapy, or become a client.
I am committed to protecting your privacy and handling your personal information securely and confidentially in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
The data controller responsible for your personal information is:
Izzi Norrington / One Practice Therapy
Email: onepracticetherapy@hotmail.com
Information collected through my website
My website does not collect personal information through contact forms, mailing lists or user accounts.
When you visit my website, certain technical information may be automatically processed by my website provider, Squarespace. This may include:
IP address
Browser type
Device information
Pages visited and interactions with the website
Information about how you found my website
I use Squarespace Analytics to understand how visitors use my website and to improve its content and accessibility. This information is used in an aggregated way and is not used to identify individual visitors.
Contacting me
If you contact me by email, I will process the information you provide, which may include:
Your name
Your email address
Any information you choose to share about seeking therapy
Please avoid sharing detailed personal or sensitive information about your circumstances in your initial enquiry email. If we arrange an initial assessment, we can discuss your situation in more depth within a confidential therapeutic setting.
Any email correspondence will be deleted after two weeks if it is not important. Where relevant, I will add any important information sent via email to your notes on Konfidens.
Booking therapy sessions
If you choose to book an introductory call, you will be directed from my website to my external booking platform, Konfidens.
Konfidens collects and processes information required to arrange appointments, provide online therapy sessions and process payments. This may include:
Contact details
Appointment information
Payment information
Information provided through Konfidens is processed according to Konfidens’ own privacy and security practices.
Therapy records and client information
Once you become a client, I collect and process information necessary to provide safe and ethical therapy. This may include:
Contact details
GP details
Information relevant to your therapy
Brief therapy notes
Appointment records
Payment records
Therapy records are maintained to support your therapeutic work, uphold professional standards and meet legal and professional responsibilities. These records are are kept using Konfidens, a GDPR-compliant, online practice management software, and are not shared with any third party. Therapy notes and client information are stored securely and access is limited to what is necessary for the provision of therapy. I hold clients’ data for seven years following their final session and then securely destroy it.
Confidentiality
Confidentiality is an important part of the therapy process. As a duty of care, I may need to share information without your consent if I am concerned that there is a serious risk of harm to yourself or others. This may involve contacting your GP or other appropriate services. I will only share the minimum necessary information, and will discuss this with you beforehand if possible.
I am also legally required to comply with court orders requesting my notes and report knowledge of the following crimes:
Terrorism
Drug Trafficking
Money Laundering
I attend regular supervision and may share your first name and relevant aspects of our work with my supervisor and/or supervision group. I also take brief clinical notes after each session, which are stored securely on Konfidens and do not constitute part of your official health record. You may request a copy of the information that I hold about you.
During walking therapy sessions, I will carry a copy of your emergency contact details and any relevant health information on my person, so that this information is available in case of emergency.
Payments
Payments may be processed through Konfidens or by direct bank transfer to my Monzo Business account.
Payment information is retained only as necessary for accounting, administration and professional record-keeping purposes.
Other services used by my practice
I use the following services to support my practice:
Website hosting:
Squarespace
Squarespace hosts my website and may process technical information relating to website visitors.
Booking, video sessions and payments:
Konfidens
Konfidens supports appointment scheduling, online sessions and payment processing.
Microsoft Teams
Teams is used as an alternative platform for online sessions.
Email communication:
Microsoft Outlook
Outlook is used for email communication with prospective and existing clients.
Banking:
Monzo Business
Monzo Business is used for direct bank transfer payments.
These services process information according to their own privacy policies and security practices. I do not accept any responsibility or liability for these policies.
Finding my practice online
My practice may be listed through services such as Google Business Profile to help people find information about my services.
I do not use Google Business Profile messaging. If you would like to contact me about therapy, please email onepracticetherapy@hotmail.com.
Google processes information according to its own privacy policies when you use Google services.
Your rights
Under UK data protection law, you have rights including:
the right to access your personal information
the right to request correction of inaccurate information
the right to request deletion of information where appropriate
the right to restrict or object to certain processing
the right to withdraw consent where processing is based on consent
If you would like to exercise any of these rights, please contact:
onepracticetherapy@hotmail.com.
I am registered with the Information Commissioner’s Office (ICO), with the registration number: 00015044841. You have the right to raise a concern with the Information Commissioner’s Office (ICO) if you believe your information has not been handled appropriately. For more information go to ico.org.uk/make-a-complaint.
Changes to this privacy policy
I may update this privacy policy from time to time to reflect changes to my practice, legal requirements or the services I use. Any updates will be published on this page with the date of revision.
If you have any questions about this privacy policy or how I handle your personal information, please contact:
Izzi Norrington / One Practice Therapy