Privacy policy

This privacy policy explains how Saba Khalil Counselling collects, uses, and protects your personal information. I am committed to protecting your privacy and handling your data in accordance with UK data protection laws (GDPR) and the British Association for Counselling and Psychotherapy (BACP) Ethical Framework.

Last updated: January 2026

Who I am

I am Saba Khalil, a BACP qualified counsellor providing counselling services to children, young people, and adults in North London. I am the data controller for the personal information I collect and process.

What information I collect

I may collect the following types of personal information:

  • Contact details: Name, email address, phone number, address
  • Session information: Date and time of appointments, session notes (stored securely and separately)
  • Sensitive information: Information about your mental and physical health, family circumstances, and other personal matters discussed during counselling
  • For children and young people: Parental/guardian contact details, school information (if applicable), age and date of birth
  • Payment information: Bank transfer details or payment records

How I collect information

I collect information through:

  • Initial contact forms and enquiries
  • Telephone or email conversations
  • In-person or online counselling sessions
  • Assessment and consent forms
  • Correspondence with schools (for school-based counselling)

How I use your information

I use your personal information to:

  • Provide counselling services to you or your child
  • Manage appointments and session scheduling
  • Maintain accurate session records as required by BACP guidelines
  • Process payments and maintain financial records
  • Communicate with you about your counselling
  • Comply with legal and professional obligations
  • Ensure safeguarding of children and vulnerable adults where required by law

Legal basis for processing

I process your personal data under the following legal bases:

  • Consent: You provide explicit consent for counselling services
  • Legitimate interests: To provide professional counselling services and maintain professional records
  • Legal obligation: To comply with safeguarding duties and professional standards
  • Vital interests: Where necessary to protect someone's life or prevent serious harm

Confidentiality

Confidentiality is fundamental to counselling practice. All information shared during counselling sessions is kept strictly confidential, except in the following circumstances:

  • Where there is a serious risk of harm to you or others
  • Where there are safeguarding concerns about a child or vulnerable adult
  • Where disclosure is required by law or court order
  • Where I am legally required to report concerns to appropriate authorities
  • With your explicit consent to share information with another professional

Working with children and young people

When working with children and young people, I maintain age-appropriate confidentiality while ensuring parents/guardians are appropriately involved. I will:

  • Obtain parental/guardian consent before beginning counselling with under 18s
  • Discuss confidentiality boundaries clearly with both young people and parents/guardians
  • Maintain the young person's privacy while keeping parents/guardians informed in general terms
  • Always prioritise safeguarding and act in the best interests of the young person

How I store and protect your information

I take your privacy seriously and use appropriate security measures:

  • Session notes are stored securely in locked, password-protected systems
  • Electronic records are encrypted and password protected
  • Physical records are kept in locked filing cabinets
  • Access to records is limited to myself only, except as required for supervision or safeguarding
  • All data is stored in the UK and complies with UK data protection laws

How long I keep your information

In line with BACP guidelines and legal requirements, I retain records for:

  • Session notes and counselling records: 7 years from the end of our therapeutic relationship (or until age 25 for young people, whichever is later)
  • Financial records: 6 years for tax purposes
  • Safeguarding records: As required by local safeguarding procedures

After these periods, records are securely destroyed through shredding (physical) or secure deletion (electronic).

Sharing your information

I will only share your information in limited circumstances:

  • Clinical supervision: I regularly attend supervision to maintain professional standards. Information is anonymised wherever possible.
  • Safeguarding: If there are serious concerns about your safety or others, I may need to contact relevant agencies (social services, police, school safeguarding leads)
  • Legal requirements: Where required by law or court order
  • With your consent: To liaise with other professionals (e.g., GPs, schools) where you have given explicit permission

I do not share your information with third parties for marketing purposes. I do not sell your data.

Your rights

Under GDPR, you have the right to:

  • Access: Request a copy of the personal information I hold about you
  • Rectification: Request corrections to inaccurate information
  • Erasure: Request deletion of your data (subject to legal and professional obligations)
  • Restriction: Request that I limit how I use your data
  • Portability: Request a copy of your data in a portable format
  • Objection: Object to certain types of processing
  • Withdraw consent: Withdraw consent for processing at any time

Please note that some rights may be limited where I have legal or professional obligations to retain records (e.g., safeguarding concerns or professional standards requirements).

Cookies and website usage

This website uses minimal cookies for essential functionality only. I do not use tracking or marketing cookies. By using this website, you consent to essential cookies that enable the contact form and basic site functionality.

Contact form

When you submit the contact form on this website, your information is sent securely and stored only for the purpose of responding to your enquiry. I will not use your contact details for any other purpose without your consent.

Changes to this policy

I may update this privacy policy from time to time to reflect changes in law or professional practice. Any changes will be posted on this page with an updated revision date.

How to contact me

If you have any questions about this privacy policy or how I handle your data, or if you wish to exercise any of your rights, please contact me:

Please use the contact form on this website.

Complaints

If you are unhappy with how I have handled your personal data, you have the right to complain to:

Information Commissioner's Office (ICO)
Website: ico.org.uk
Telephone: 0303 123 1113

You can also raise concerns about my professional conduct with:

British Association for Counselling and Psychotherapy (BACP)
Website: bacp.co.uk