Journey to Self with Sufiya provides online counselling and psychotherapy. We are committed to handling personal information lawfully, fairly and transparently under UK GDPR and the Data Protection Act 2018.
What information we collect
- Contact details such as name, email and phone number.
- Scheduling and payment information.
- Clinical information shared during assessments and sessions.
- Basic website usage and essential cookie data.
- Safeguarding information where there is a concern about risk.
Why we use your information
- To provide counselling services and manage appointments.
- To keep appropriate clinical records.
- To meet safeguarding and legal duties.
- To process sensitive health data with explicit consent, except where emergency or legal duties apply.
Working with under-18s
Where appropriate, we may work with people under 18. Children under 16 require parent or guardian consent. Young people’s data is handled with additional care.
How we share information
Information may be shared for essential administration, anonymised clinical supervision, with emergency services or GPs where there is significant risk, or with providers supporting secure email, hosting and storage. We never sell personal data.
International transfers
Some providers may store data outside the UK. Appropriate safeguards such as standard contractual clauses are used where required.
How long we keep data
Clinical records are generally kept for seven years from last contact, or until a young client turns 25. Administrative and financial records are generally kept for six years.
Your rights
You may ask to access, correct, delete or restrict your data, request portability, object to certain processing or withdraw consent. Email safyauk@yahoo.co.uk. You may also complain to the Information Commissioner’s Office at ico.org.uk.
Security, cookies and communication
Reasonable technical and organisational measures are used to protect data. This WordPress site uses essential cookies and may use basic analytics. Email and WhatsApp have their own privacy policies, so please avoid sharing highly sensitive details through them.
Changes to this policy
Updates will appear on this page. Please check periodically.
Effective date: 11 November 2025 · Last updated: 11 November 2025