Privacy Policy

---

 1. Who We Are

CTRL+K is a private counselling and psycho-education practice based in the UK. The data controller is Stevie Kilmister, owner and operator of CTRL+K. If you have any questions about this policy, you can contact us at:

📧 Email: [hello@ctrlk.co]

2. What Information We Collect

We may collect and process the following personal data:

When using the website:

• Name and contact information (if you submit a form or send an email)
• IP address and browsing behaviour (via cookies or analytics tools)

If you become a client:

• Contact details (name, phone number, email, address)
• Emergency contact details (with your consent)
• Session notes and relevant personal information shared in therapy
• Administrative data for booking, billing and communication

3. How We Use Your Data

Your data is only used for the following purposes:

• To provide counselling services
• To manage bookings and communication
• To comply with legal and professional obligations
• To respond to your enquiries
• To improve our website or services

CTRL+K does not use your data for automated decision-making, profiling, or marketing without your explicit consent.

4. Legal Basis for Processing

Under the UK GDPR, we rely on the following legal bases:

· Consent – when you voluntarily submit your information

· Contract – to provide therapy or training services

· Legal obligation – to comply with tax, supervision, or regulatory requirements

· Legitimate interests – e.g. maintaining business records or improving services

5. How Your Information Is Stored

Your information is securely stored:

• Electronic records are kept in encrypted, password-protected systems.
• Paper notes (if used) are locked in a secure filing system.
• Only the data controller has access to confidential client material.

We retain client records for 7 years (or 7 years after the client turns 18, if under 18) in accordance with guidance from professional bodies and insurers. After this, data is securely deleted or destroyed.

6. Sharing Your Information

Your information will never be sold or shared for commercial purposes.

Information may only be shared:

• With your explicit consent (e.g. to contact your GP)
• If required by law (e.g. safeguarding, risk of serious harm)
• For professional supervision (discussed anonymously)
• With accountants or insurers, only for administrative/legal purposes (no confidential information will be shared)

7. Your Rights

Under UK data protection law, you have rights including:

• To access your data
• To correct or update inaccurate data
• To ask for data to be erased (in certain cases)
• To restrict or object to processing
• To data portability (for electronic records)

To lodge a complaint with the ICO (Information Commissioner’s Office):

🔗 www.ico.org.uk

8. Cookies & Website Analytics

This website may use cookies or tracking pixels to collect anonymous usage data. You can disable cookies in your browser settings. No personally identifiable information is collected without your consent.

9. Third-Party Links

This website may include links to other websites (e.g. booking platforms or resources). We are not responsible for their privacy policies or content. We recommend checking their policies directly.

10. Changes to This Privacy Notice

We may update this privacy notice from time to time. The latest version will always be available on our website, and we encourage you to check back regularly.