Privacy

Talya Ressel Therapy Practice

Last updated: 6 November 2026

1. Introduction

At Talya Ressel Therapy Practice, I recognise the importance of protecting your privacy and treating your personal information with care, respect and confidentiality.

This Privacy Policy explains how I collect, use, store and protect your personal information when you visit my website, www.talyaressel.com, contact me or engage in therapy with me.

I am committed to protecting your personal data in accordance with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, as amended, and other applicable UK data protection legislation.

This policy explains:

What personal information I collect.
Why I collect and how I use your information.
How your information is stored and protected.
When information may be shared with others.
How long I retain your records.
Your rights in relation to your personal information.

2. Who is responsible for your information?

Talya Ressel Therapy Practice is responsible for the personal information collected and processed in connection with the provision of my therapy services.

I act as the data controller for the personal information I hold about you.

If you have any questions about this policy or how your information is handled, please contact me through the contact section of my website:

https://www.talyaressel.com

3. Information I collect

I may collect and hold the following types of personal information.

Contact and identification details

Your name.
Address, where required.
Email address.
Telephone number.
Emergency contact details, where appropriate.

Personal and therapeutic information

As part of the initial assessment and ongoing therapeutic process, I may collect information including:

Personal and family history.
Relevant medical history.
Mental health history and current wellbeing.
Medication and relevant treatment information.
Information about your circumstances, relationships and experiences.
Brief therapy session notes and information relating to the therapeutic process.

Some of this information is considered special category personal data under the UK GDPR, particularly information relating to your physical and mental health. This information requires additional protection.

I only collect information that is relevant and necessary for providing my services and working safely and professionally.

4. How and why I use your information

I use your personal information for the following purposes:

To respond to enquiries and requests for information.
To arrange appointments and manage the therapeutic relationship.
To undertake initial assessments and provide appropriate therapeutic support.
To maintain accurate and appropriate professional records.
To contact you regarding appointments or changes to arrangements.
To consider referrals or other support where appropriate.
To meet relevant professional, legal and regulatory obligations.
To address safeguarding concerns where necessary.

Your information is treated as confidential and is used only for purposes connected with the provision and administration of my therapy services, unless another lawful reason applies.

5. Lawful basis for processing your information

Under the UK GDPR, I must have a lawful basis for collecting and using your personal information.

Depending on the purpose, I may rely on the following lawful bases:

Contract: Where processing is necessary to provide the therapy services you have requested or to take steps at your request before entering into an agreement.
Legitimate interests: Where necessary for the proper administration and operation of my practice, provided these interests do not override your rights and freedoms.
Legal obligation: Where I need to process information to comply with a legal requirement.

Information relating to your mental or physical health is classed as special category data and requires an additional legal condition for processing under Article 9 of the UK GDPR.

I will identify and document the appropriate condition for processing this information, taking account of the nature of my professional services and applicable confidentiality obligations.

Where explicit consent is the appropriate condition, I will obtain it separately and explain what it covers.

Your agreement to therapy and your consent to particular uses of your information are not necessarily the same thing. I will explain any relevant distinctions when we begin working together.

6. Confidentiality and sharing your information

Confidentiality is fundamental to the therapeutic relationship.

I will not routinely share your personal information with other individuals or organisations without your knowledge and, where appropriate, your consent.

There are, however, circumstances in which information may need to be shared. These may include:

Where there is a serious concern that you may harm yourself.
Where there is a serious concern that you may harm another person.
Where I believe you are at serious risk of harm from someone else.
Where there are safeguarding concerns involving a child or vulnerable person.
Where disclosure is required by law or a court order.
Where disclosure is necessary to obtain appropriate professional advice or meet a relevant professional obligation.

Wherever possible and appropriate, I will discuss any proposed disclosure with you beforehand.

Only information that is necessary and proportionate will be shared, and only with relevant individuals or organisations.

I may also discuss aspects of my work in professional supervision. This is an important part of maintaining safe and ethical therapeutic practice. Wherever possible, identifying details will be excluded or minimised. Any information shared will be handled in accordance with my professional confidentiality obligations and applicable data protection requirements.

7. Website cookies and data storage

My website, https://www.talyaressel.com, is hosted on the Wix.com platform.

Wix provides the online platform through which I advertise my services and communicate information about my practice.

Wix may collect and process information through cookies and similar technologies. These may be used for purposes including:

Enabling the website to function properly.
Improving the visitor experience.
Monitoring website performance.
Understanding how visitors use the website.
Maintaining website security.

I may also use website analytics tools to understand general visitor activity, including page visits, session duration, response times and website interactions.

Where cookies or similar technologies are not strictly necessary for the operation of the website, I will seek consent where required by applicable law.

You can manage your cookie preferences through the website's cookie settings and your browser settings.

For further information about how Wix handles personal information, please refer to Wix's privacy policy:

https://www.wix.com/about/privacy

8. Contact through my website and email

When you contact me through my website, I may collect your name, email address, telephone number and any other information you choose to provide.

I use this information to respond to your enquiry and provide information about my services.

If you do not go on to become a client, I will delete your enquiry information when it is no longer needed, subject to any applicable legal requirements.

If you become a client, relevant information will be retained as part of your confidential client record.

My email services are processed by Microsoft. Information sent or received by email may therefore be processed through Microsoft's systems and is subject to its applicable privacy and data protection arrangements.

Please be aware that email is not always a secure method of communication. I recommend that you do not send highly sensitive personal or therapeutic information by ordinary email unless we have agreed an appropriate method of communication.

9. How your information is stored and protected

I take appropriate measures to protect your personal information against loss, misuse, unauthorised access, disclosure, alteration or destruction.

These measures include:

Password protection and appropriate access controls on electronic devices.
Secure storage of electronic client records.
Appropriate physical security for paper records.
Limiting access to personal information to those who have a legitimate need to access it.
Taking reasonable precautions when communicating or transferring information.

I regularly review the security arrangements used to protect the information I hold.

No method of electronic storage or transmission can be guaranteed to be completely secure, but I take reasonable and appropriate steps to protect your information.

10. International transfers of information

My website is hosted by Wix, and my email services are provided by Microsoft.

These providers may process or store personal information using infrastructure located in different countries.

Where personal information is transferred outside the United Kingdom, I will ensure that an appropriate legal transfer mechanism and safeguards are in place in accordance with applicable data protection legislation.

These safeguards may include UK adequacy regulations or an appropriate international data transfer agreement or other recognised transfer mechanism.

Further information about the relevant arrangements can be obtained from the privacy information provided by Wix and Microsoft.

11. How long I retain your information

I retain client records for professional, legal and administrative purposes.

My current retention policy is:

Adult client records are retained for a minimum of seven years following the last occasion on which therapy takes place.
Where a client is under 18, records are retained for seven years after their eighteenth birthday.

At the end of the applicable retention period, electronic records will be securely deleted and paper records will be confidentially destroyed.

I may retain information for longer where necessary, for example, in connection with an ongoing complaint, legal proceedings or another legitimate legal or professional requirement.

Enquiry information relating to individuals who do not become clients will be deleted when it is no longer necessary to retain it.

12. How I contact you

I may contact you by telephone, email or other agreed means for purposes connected with my practice.

This may include:

Appointment confirmations and reminders.
Changes to appointments.
Responses to your enquiries.
Information you have requested about my services.
Checking in if you have missed an appointment and I have not heard from you, where appropriate to your wellbeing and our therapeutic arrangements.

I will respect your communication preferences and will not use your personal information for unrelated marketing purposes without an appropriate lawful basis and, where required, your consent.

13. Your rights under data protection law

Under the UK GDPR, you have a number of rights concerning your personal information.

These include:

Right of access

You can request a copy of the personal information I hold about you. This is commonly known as a Subject Access Request.

Right to rectification

You can ask me to correct information that is inaccurate or incomplete.

Right to erasure

In certain circumstances, you can request that your personal information be deleted. This right is not absolute, and I may need to retain certain records to meet legal or professional obligations.

Right to restrict processing

You can request that I restrict how I use your personal information in certain circumstances.

Right to data portability

Where applicable, you can request that personal information you have provided to me is transferred to you or another organisation in a structured, commonly used and machine-readable format.

Right to object

You can object to certain types of processing, including processing based on legitimate interests or direct marketing.

Rights relating to automated decision-making

You have rights in relation to certain decisions made solely by automated means, including profiling, where these have legal or similarly significant effects.

Not all rights apply in every situation. For example, the right to erasure and the right to data portability are subject to specific conditions.

If you wish to exercise any of these rights, please contact me through the contact section of my website.

I may need to ask you for information to verify your identity before responding to your request.

Further information about your rights can be found on the Information Commissioner's Office website:

https://ico.org.uk/for-the-public/

14. Complaints and concerns

If you have any questions, concerns or complaints about the way I collect, store or use your personal information, please contact me in the first instance through my website.

I will take your concerns seriously and do my best to resolve them.

You also have the right to make a complaint to the Information Commissioner's Office (ICO), which is the UK's independent data protection regulator.

Information Commissioner’s Office:

https://ico.org.uk/

15. Changes to this Privacy Policy

I may update this Privacy Policy from time to time to reflect changes in legislation, professional requirements, technology or the way I operate my practice.

The latest version will always be available on my website, together with the date on which it was last updated.

I encourage you to review this policy periodically.

16. Governing law

This Privacy Policy and any matters relating to the handling of personal information will be interpreted in accordance with applicable data protection legislation in the United Kingdom and the laws of England and Wales, where applicable.

17. Acknowledgement

I believe that trust, respect and confidentiality are essential to a positive therapeutic relationship.

By working with me, you acknowledge that you have been provided with access to this Privacy Policy and have had the opportunity to read and ask questions about how your personal information is collected, used and protected.

Where specific consent is required for the processing of your personal information, including special category data, this will be obtained separately and appropriately documented.

Your privacy and the confidentiality of your therapeutic work remain central to my professional practice.