Privacy

Your privacy matters to me. This page explains what personal information I collect, why I need it, how it is used and how long I keep it.

Who is responsible for your information?

I am Jonathan Sheriff, trading as Jonathan Sheriff Psychotherapy. I am the data controller for personal information I hold about people who enquire about or use my psychotherapy service.

If you have any questions about how I use your information, you can contact me at:

enquiries@jonathansheriff.co.uk

What information I may collect

If you contact me or become a client, I may collect information such as:

• your name and contact details
• information you provide when arranging appointments
• information relevant to our work together
• brief clinical and session notes
• information relating to risk or safeguarding where relevant
• appointment and payment records
• correspondence between us

Psychotherapy inevitably involves information about health and may also involve other sensitive personal information.

I aim to collect only information that is relevant to providing the service and maintaining appropriate professional records.

Why I use your information

I use personal information to:

• respond to enquiries
• arrange and manage appointments
• provide psychotherapy
• maintain appropriate clinical records
• communicate with you about our work together
• manage payments and business records
• meet professional, safeguarding, insurance and legal responsibilities

My lawful bases for processing ordinary personal information include taking steps towards or fulfilling our therapeutic contract, legitimate interests in running and protecting my practice, and legal obligations where these apply.

Where I process sensitive information, including information about mental or physical health, I do so because it is necessary for the provision of health or therapeutic care and is handled subject to a duty of confidentiality.

Clinical notes

I keep brief clinical records to support safe and appropriate therapeutic work.

Sessions are not routinely audio or video recorded.

I may use local digital tools on equipment under my control to help prepare clinical notes after a session. Temporary working audio, transcription or draft material used for this purpose is deleted once the final clinical note has been reviewed and completed.

The final clinical record is stored within Therasee.

Therasee

I use Therasee to manage appointments and client records.

For information entered into Therasee about my clients, I remain the data controller and Therasee acts as a data processor on my behalf.

Therasee also provides the online booking system used by this website.

Payments

Where you pay by card through Therasee, payment processing is provided by Stripe.

I do not receive or store your full card details.

Website and email

My website is hosted by Netlify and my email is provided by Google Workspace.

Netlify provides the infrastructure used to host this website. Google Workspace provides my email service.

Supervision and confidentiality

I work under regular clinical supervision as part of safe and ethical psychotherapy practice.

I may discuss my clinical work in supervision. I take care to limit identifying information wherever possible, and my supervisor is also required to respect confidentiality.

There are limited circumstances where confidentiality may need to be broken, for example where required by law or where there is a serious safeguarding concern. I would normally discuss this with you where it is appropriate and possible to do so.

How long I keep information

Clinical records are normally kept for six years after our work together ends.

They may be retained for longer where there is a clear legal, regulatory or insurance-related reason to do so.

Information relating to an enquiry that does not lead to therapy will normally be deleted sooner when it is no longer needed.

Financial and accounting records may be kept for different periods where required by tax or other legal obligations.

Who I may share information with

I do not sell client information.

Information may be processed by organisations that provide services necessary to run my practice, including:

• Therasee, for practice management and clinical records
• Stripe, where card payments are used
• Netlify, for website hosting
• Google Workspace, for email

Information may also need to be disclosed where required by law, in connection with safeguarding, or in relation to legal or insurance matters.

I will otherwise protect the confidentiality of information you share with me.

Your rights

Depending on the circumstances, data-protection law gives you rights in relation to your personal information. These may include the right to:

• ask what information I hold about you
• receive a copy of your information
• have inaccurate information corrected
• ask for processing to be restricted
• object to certain uses of your information
• ask for information to be erased where the law allows this

Some rights are not absolute. For example, there may be circumstances where I need to retain information despite a request for deletion.

You can raise a privacy question or make a request by emailing:

enquiries@jonathansheriff.co.uk

You also have the right to raise a concern with the Information Commissioner’s Office (ICO).

Changes to this notice

I may update this notice if the way I work or the services I use change.

Last updated: September 2026