Privacy Policy
Last reviewed May 2026 · ICO Registration: ZC125133
Who We Are
DEBELL LTD (trading as DeBell Counselling). Data Controller: Debra Bell. Address: Cottingham, East Yorkshire. Email: contact@debell.co.uk. Phone: 07867 818018. Website: www.debell.co.uk. ICO Registration Number: ZC125133.
DeBell Counselling is a private counselling practice. This policy explains what personal data we collect, why we collect it, how we use it, and your rights in relation to it. It applies to clients, prospective clients, and visitors to our website.
What Data We Collect
For clients and prospective clients we collect: contact information (name, email address, phone number, postal address), date of birth, GP name and surgery, emergency contact details, health and mental health information shared in the course of counselling, session notes and clinical records, payment and invoicing records, and communications between you and Debra Bell by email or phone.
If you use the contact form on our website we collect your name, email address, phone number, and the content of your message. We do not use tracking cookies for advertising purposes.
How We Use Your Data
To provide counselling services and manage the therapeutic relationship, to communicate with you about appointments and invoices, to keep clinical records as required by professional standards, to ensure the safety of you and others including safeguarding obligations, to comply with legal and professional obligations, and to process payments.
Legal Basis for Processing
We rely on legitimate interests, legal obligation, vital interests, and contract as appropriate under UK GDPR. Special category health data is processed under Article 9(2)(h) UK GDPR, processing necessary for the provision of health or social care.
Who We Share Your Data With
Your data is confidential. We do not sell, rent, or share your personal data with third parties for marketing purposes. We may share in the following limited circumstances: with our clinical supervisor (Joy Wanless) in professional supervision; with your GP, emergency services or statutory authorities where there is a serious and imminent risk to life; and with third-party service providers including Zanda Health (practice management, GDPR-compliant and ISO 27001-certified) and Stripe (payment processing), both bound by data processing agreements. We may also share if required by law or court order.
Data Retention
Client records are retained for seven years following the end of therapy, in line with BACP guidance. If a client was under 18 at the end of therapy, records are retained until their 25th birthday. Records of prospective clients who did not proceed are retained for six months then securely deleted. Financial records are retained for six years in line with HMRC requirements. After the relevant retention period, records are securely and permanently destroyed.
How We Store Your Data
Client records are stored using Zanda Health. All data is encrypted in transit and at rest. Paper records are stored in a locked cabinet. Email communication is conducted via a secure business email account.
Your Rights
Under UK GDPR you have the right of access, rectification, erasure, restriction, data portability, and the right to object. To exercise any of these rights, contact Debra Bell at contact@debell.co.uk. We will respond within one calendar month. Some rights are limited in the context of health records and we will explain any limitations when you make a request.
Complaints
If you have a concern about how we handle your personal data, please contact Debra Bell in the first instance at contact@debell.co.uk. If not satisfied, you have the right to complain to the ICO: www.ico.org.uk | 0303 123 1113.
Changes to This Policy
This policy is reviewed annually or whenever there is a significant change to how we process data. The current version is always available at www.debell.co.uk and on request by email.
