Adrian Tupper's Privacy Notice

I, Adrian Tupper, am the Data Controller responsible for your personal information.
My contact email address is counsellor@adriantupper.co.uk.

I am registered with the Information Commissioner's Office (ICO) (registration number ZA449414). I process personal information in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

Introduction

I am committed to protecting your privacy. Please read the following to learn how I collect, use, store and protect your personal information. If you have any queries concerning your personal information or any questions on my use of the information, please contact me at counsellor@adriantupper.co.uk.

When you request counselling with me, or otherwise provide your personal details to me, this information is collected and stored for the purpose of responding to your query and providing you with the requested service. I will only use this information to respond to your enquiry and provide the services you have requested, unless I am required or permitted by law to use it for another purpose.

I understand that sharing personal information can feel sensitive. This notice explains what information I collect, why I collect it, and how I keep it confidential.

What information do I collect?

  • Initial Enquiry - Initial enquiries can be made via a contact form, email, phone or text message. This may involve you providing me with your name, telephone number and email address, as well as information on your availability, therapeutic issues, and other details relevant to processing your request. If we do not proceed with counselling, I will normally delete your enquiry information within 12 months, unless I am required to retain it for legal reasons.
  • Appointments - In an initial appointment I will ask about your current personal, social and medical circumstances. I will also ask about your background and family history, as well as the issues which are affecting you now. I require this information so that I can gauge whether I am able to help you and to inform our psychotherapeutic work on an ongoing basis.
  • Handwritten notes - I keep anonymised handwritten clinical notes: records of sessions attended, cancelled or rescheduled; and relevant themes of the therapeutic work undertaken. These notes may include information in the following categories which are subject to enhanced protections: race and ethnicity information; health data including mental health data and medications; sexual orientation information.
  • Additionally for supervisees - I will keep, as handwritten notes, information relevant to your clients and supervisees which you provide to me. You can instruct me not to record such information which, in any case, will be anonymised.

What do I use your information for?

I use information held about you in the following ways:

  • To respond to queries for information or services.
  • To provide the professional psychotherapeutic services requested from me.
  • To notify you of changes to appointments.
  • To administer my service, including the arrangement of appointments and the handling of payments.
  • To fulfil my administrative, legal and contractual obligations in line with my professional bodies.

What information do I share?

I will not share any information about you with other organisations or people, except in the following situations:

  • Consent - I may share your information with health care professionals or others to whom you have provided me with consent.
  • Serious harm - I may share your information with the relevant authorities if I have reason to believe that this may prevent serious harm being caused to you or to another person.
  • Compliance with law - I may share your information where I am required to by law or by the regulations and other rules to which I am subject.
  • Professional Executor - I may only share your contact information with a Professional Executor if I am incapacitated and/or unable to contact you in person. I have appointed another psychotherapist who, only under these circumstances, would contact you to discuss your needs and what course of action you may want to take.
  • Clinical Supervisor - As a professional requirement, and for good practice, I discuss my work with an experienced clinical supervisor as part of my professional obligations. Wherever possible, discussions are anonymised and I do not disclose your full name or contact details.

Lawful bases and data protection rights

Under UK data protection law, I must have a “lawful basis” for collecting and using your personal information. There is a list of possible lawful bases in the UK GDPR. You can find out more about lawful bases on the ICO’s website.

Which lawful basis I rely on may affect your data protection rights which are set out in brief below. You can find out more about your data protection rights and the exemptions which may apply on the ICO’s website:

If you make a request, I must respond to you without undue delay and in any event within one month. 

To make a data protection rights request, please contact me using the contact details at the top of this privacy notice. 

My lawful bases for the collection and use of your data

My lawful bases for collecting or using personal information to provide services are:

  • Contract (Article 6(1)(b) UK GDPR) - Processing is necessary to provide the psychotherapy, counselling or supervision services you have requested.
  • Health or social care (Article 9(2)(h) UK GDPR) - Some of the information I process is special category personal data (such as information about your physical or mental health). I process this information because it is necessary for the provision of health or social care and I am subject to a duty of confidentiality.

How do I keep your information safe?

All information you provide to me is stored as securely as possible. All paper forms and correspondence are kept in a locked filing cabinet on my premises. All electronic records are stored on my own electronic devices, all access to which requires password protection and, where available, multi-factor authentication, or by reputable service providers using secure internet cloud technology. Unfortunately, the transmission of information via the internet is never completely secure. Although I will do my best to protect your information using appropriate technical and organisational security measures, including encryption where appropriate, I cannot guarantee the security of your data transmitted to me via email; any transmission is at your own risk.

Once I have received your information, I will use strict procedures and security features to try to prevent unauthorised access. Records are retained for seven years after therapy ends (or seven years after a child or young person reaches the age of 18 where applicable) in accordance with my professional record retention policy and limitation periods.

Changes to this policy

I may edit this policy from time to time. If I make any substantial changes I will notify you.

How to complain

If you have any concerns about my use of your personal information, you can make a data protection complaint to me:

Email: counsellor@adriantupper.co.uk

If you remain unhappy with how I have used your data after raising a complaint with me, you can also complain to the ICO:

Helpline number: 0303 123 1113
Website: https://www.ico.org.uk/make-a-complaint

Last updated July 2026