Privacy Policy

Amber Room Counselling
Last updated: 28 August 2026

Amber Room Counselling is committed to protecting your privacy and handling your personal information with care, confidentiality and respect.

This Privacy Policy explains how Amber Room Counselling collects, uses, stores and protects personal information when you visit this website, contact me about counselling, or access counselling services.

1. Who is responsible for your information?

Amber Room Counselling is operated by Evee Mill.

For the purposes of UK data protection law, I am the data controller responsible for the personal information I hold about you.

If you have any questions about how your information is handled, you can contact me at:

Email: amberroomcounselling@gmail.com

2. What information do I collect?

Depending on how you interact with Amber Room Counselling, I may collect:

Information you provide when contacting me

This may include:

  • your name;

  • email address;

  • telephone number;

  • information contained in your enquiry;

  • your preferred method of contact; and

  • information you choose to provide about your circumstances or counselling needs.

Please avoid including detailed or sensitive information about your mental health or personal circumstances in an initial website enquiry unless it is necessary.

Information collected when you become a client

If you engage in counselling with Amber Room Counselling, I may need to collect information including:

  • your name and contact details;

  • emergency contact details where appropriate;

  • information relevant to your counselling;

  • counselling notes and records;

  • information relating to your wellbeing, mental health and personal circumstances;

  • safeguarding information where relevant;

  • appointment and attendance information;

  • payment and invoicing information; and

  • correspondence relating to your counselling.

Some of this information may constitute special category personal data, including information concerning your health.

I only collect information that is relevant and necessary for providing counselling safely and appropriately.

3. How is your information collected?

I may collect information:

  • directly from you when you contact me;

  • when you complete a website contact form;

  • when you email, telephone or otherwise contact me;

  • during the counselling assessment and therapeutic process;

  • when arranging or managing appointments;

  • when processing payments; or

  • where necessary, from another professional or organisation involved in your care, where there is an appropriate lawful basis for doing so.

4. How do I use your information?

I may use your personal information to:

  • respond to enquiries;

  • arrange and manage counselling appointments;

  • provide counselling services;

  • maintain appropriate professional and clinical records;

  • communicate with you about your appointments;

  • process payments and maintain financial records;

  • manage safeguarding concerns where necessary;

  • meet professional, legal and regulatory obligations;

  • obtain professional supervision where appropriate;

  • maintain appropriate records for insurance and professional accountability; and

  • respond to legal claims or requests from lawful authorities where required.

I do not use your counselling information for advertising or sell your personal information to third parties.

5. Lawful basis for processing

Under UK data protection law, I must have a lawful basis for processing personal information.

Depending on the circumstances, I may rely on:

  • Contract: where processing is necessary to provide counselling services to you or take steps at your request before entering into an agreement.

  • Legitimate interests: for appropriate business administration, communication and management of my counselling practice, where those interests are not overridden by your rights.

  • Legal obligation: where I am required to process or retain information to comply with the law.

  • Consent: where consent is the appropriate lawful basis, including certain optional communications or website technologies.

  • Vital interests: in exceptional circumstances where processing is necessary to protect someone's life.

Where I process special category information, such as information concerning your health, I will also rely on an appropriate additional condition under UK data protection law.

6. Confidentiality

Counselling is a confidential service. I take reasonable and appropriate steps to protect information shared with me.

There are, however, circumstances where confidentiality may need to be limited. These may include:

  • serious concerns about your safety or the safety of another person;

  • safeguarding concerns;

  • where disclosure is required by law;

  • where disclosure is necessary to prevent or detect serious crime; or

  • where information is required by a court or other lawful authority.

Where possible and appropriate, I will discuss any necessary disclosure with you beforehand.

I may also discuss client work within professional supervision. Information shared for supervision is handled in accordance with professional confidentiality and data-protection requirements.

7. Who may receive your information?

I do not sell or rent your personal information.

Where necessary, information may be shared with:

  • professional supervisors;

  • relevant healthcare or safeguarding professionals, where necessary and lawful;

  • payment providers;

  • website, email, scheduling or other service providers used to operate the practice;

  • professional indemnity insurers or legal advisers where necessary;

  • HM Revenue & Customs or other authorities where legally required; and

  • law enforcement or other public authorities where I am legally required or permitted to provide information.

Where third-party service providers process personal information on my behalf, I take reasonable steps to ensure that appropriate data-protection arrangements are in place.

8. Counselling records

Counselling records are kept only for as long as they are reasonably necessary for the purposes for which they were collected, taking account of professional, legal, insurance and safeguarding requirements.

Different types of information may therefore be retained for different periods.

At the end of the applicable retention period, information will be securely deleted or destroyed unless there is a lawful reason to retain it for longer.

9. Keeping your information secure

I take appropriate technical and organisational measures to protect your personal information against:

  • unauthorised access;

  • accidental loss;

  • destruction;

  • misuse; and

  • unauthorised disclosure.

No method of transmitting or storing information electronically can be guaranteed to be completely secure. However, I take reasonable steps to minimise these risks.

10. Your data protection rights

Depending on the circumstances, you have rights under UK data protection law, including the right to:

  • ask for a copy of the personal information I hold about you;

  • ask me to correct inaccurate or incomplete information;

  • ask for your information to be deleted in certain circumstances;

  • ask me to restrict how I use your information in certain circumstances;

  • object to certain processing;

  • ask for your information to be transferred in certain circumstances; and

  • withdraw consent where processing is based on consent.

These rights are subject to certain legal exceptions and may not apply in every situation.

If you wish to exercise a data-protection right, please contact me using the details above.

11. Right to complain

If you have concerns about how I have handled your personal information, I would encourage you to contact me first so that I can try to resolve the issue.

You also have the right to complain to the UK's data protection regulator:

Information Commissioner's Office (ICO)

You can find information about making a complaint on the ICO's website.

12. Third-party websites

This website may contain links to external websites. I am not responsible for the privacy practices or content of websites operated by third parties.

I recommend reviewing the privacy policy of any external website you visit.

13. Changes to this Privacy Policy

I may update this Privacy Policy from time to time to reflect changes to my services, the way I process information, or legal and regulatory requirements.

The latest version will always be published on this website.

Last updated: 28 August 2026