Chris Jones Therapy Privacy Policy
Last updated: September 2026
Chris Jones Therapy is committed to protecting your privacy and handling your personal information securely, lawfully and transparently.
This Privacy Policy explains what information I collect, why I collect it, how it is used and stored, who may have access to it, and your rights in relation to your personal data.
Chris Jones Therapy is the data controller for the personal information covered by this policy and is registered with the Information Commissioner’s Office (ICO) under registration number ZB607936.
Information I Collect
The information collected will depend on the services you use and may include:
- your name, address, email address and telephone number;
- information provided through enquiry, consultation, assessment or application forms;
- GP and emergency contact information where this is appropriate to the service being provided;
- information relating to appointments, programme participation and payments;
- therapeutic, coaching or programme records;
- worksheets, treatment plans and other material you choose to submit as part of your work;
- correspondence between you and Chris Jones Therapy; and
- information necessary to provide access to online courses, resources and other services.
The nature of counselling, coaching and the From Harm to Healing programme means that some information you provide may constitute special category data under UK data protection law. This may include information concerning your physical or mental health, sex life, sexual orientation, religious or philosophical beliefs, or other sensitive personal information.
I only collect information that is reasonably necessary to provide and administer the services you have requested.
How Your Information Is Used
Your personal information may be used to:
- respond to enquiries;
- assess suitability for services or programmes;
- arrange, cancel and manage appointments;
- provide counselling, coaching and group programmes;
- administer From Harm to Healing and associated resources;
- provide and manage access to online courses and member resources;
- communicate with you about services in which you are participating;
- administer payments and maintain appropriate financial records;
- maintain appropriate therapeutic, coaching and programme records;
- fulfil professional, legal, safeguarding and regulatory obligations; and
- establish, exercise or defend legal claims where necessary.
Your personal information will not be sold or provided to other organisations for their own marketing purposes.
Lawful Basis for Processing
Chris Jones Therapy processes personal information only where there is a lawful basis for doing so.
Depending on the information and purpose involved, processing may be necessary:
- to take steps at your request before entering into an agreement with you or to perform the agreement under which services are provided;
- for the legitimate interests of operating and administering Chris Jones Therapy and providing services safely and effectively;
- to comply with a legal obligation; or
- where you have given consent for a particular use of your information.
Where information constitutes special category data, an additional legal condition is required. Where appropriate, Chris Jones Therapy relies on your explicit consent to process this information in connection with the counselling, coaching or programme services you have chosen to undertake. Other legal conditions may apply where processing is necessary in circumstances such as establishing, exercising or defending legal claims or protecting vital interests.
Where processing is based on consent, you may withdraw that consent at any time. Withdrawal of consent does not affect processing that has already taken place lawfully and may affect my ability to continue providing a service where the relevant information is necessary for that service.
Storage and Security
Personal information and clinical or programme records are stored using secure, password-protected systems. Two-factor authentication is used on systems containing sensitive information where available and appropriate.
Devices used to access personal information are password protected and secured against unauthorised access.
Reasonable technical and organisational measures are used to protect personal information against accidental loss, unauthorised access, disclosure, alteration or destruction.
No electronic system can be guaranteed to be completely secure, but appropriate precautions are taken having regard to the sensitivity of the information being processed.
Administrative Access
Chris Jones Therapy uses authorised administrative support to assist with the operation of the practice.
The administrator may access personal information where necessary for administrative purposes, including responding to enquiries, managing bookings, programme administration, payments and general correspondence.
Administrative access is limited to information reasonably necessary for these responsibilities. Clinical notes and therapeutic records are not routinely accessible to administrative personnel.
Anyone with authorised access to personal information through Chris Jones Therapy is required to maintain appropriate confidentiality and data security.
Counselling, Coaching and Group Sessions
Online sessions are conducted from an appropriately private setting using established video-calling services.
You are responsible for ensuring, as far as reasonably possible, that you participate from a location where you are comfortable discussing confidential information and where conversations cannot be overheard by others.
Our work may involve worksheets, treatment plans or other therapeutic and programme resources. Where you submit completed material to Chris Jones Therapy, it will be handled as confidential personal information and stored using the same security principles described in this policy.
Email and Communications
Email accounts used by Chris Jones Therapy are password protected and secured using two-factor authentication where available.
The general practice email address may be accessed by authorised administrative personnel as well as Chris Jones where this is necessary to manage enquiries and administrative correspondence.
Where appropriate, practitioner correspondence may be handled separately from general administrative correspondence.
Email addresses and telephone numbers may be used to contact you about enquiries, appointments, programme administration, course access or other matters directly related to services you have requested or are currently receiving.
Telephone numbers may also be used to issue appointment reminders.
Because ordinary email and electronic communications cannot be guaranteed to be completely secure, you should consider the sensitivity of information you choose to send by email.
Payments
Payments may be processed using Stripe or by bank transfer.
Chris Jones Therapy does not directly store full debit or credit card details. Where you pay through a payment processor, your payment information is processed by that provider in accordance with its own privacy and security arrangements.
Chris Jones Therapy may retain appropriate records of transactions, invoices and payments where required for accounting, tax and business administration purposes.
Website, Member Area and Online Courses
Chris Jones Therapy uses online systems, including its website and membership/course platform, to provide access to From Harm to Healing and other resources.
These systems may process information such as your name, email address, account details, course access, membership status and information necessary to administer your participation.
Access to online services is protected by individual user accounts. You are responsible for keeping your login credentials secure and should not share them with other people.
Peer Connection and Slack
Clients who have completed the From Harm to Healing Stage 1 programme may be offered the option of joining Peer Connection, which is hosted through Slack.
Peer Connection is an optional space designed to help members find and connect with other Stage 1 graduates for individual accountability relationships or peer-led groups. Participation is entirely voluntary.
If you choose to join Peer Connection, information associated with your Slack account, including your name, profile information and membership of the workspace, may be visible to other members of that workspace.
Information you choose to post, send or disclose through Slack is shared at your own discretion. Peer-led groups, accountability relationships and private communications between members are independently organised and are not facilitated, supervised or routinely monitored by Chris Jones Therapy.
Members are responsible for maintaining the confidentiality of information shared between themselves. Chris Jones Therapy cannot guarantee the confidentiality of information that you voluntarily disclose to another member.
Slack is a third-party service and information processed through the workspace is also subject to Slack’s applicable privacy, security and data-processing arrangements.
Third-Party Service Providers
Chris Jones Therapy uses a limited number of third-party service providers to operate the practice and provide services. These may include providers used for:
- website hosting and membership/course delivery;
- secure cloud storage;
- email and communications;
- video conferencing;
- appointment scheduling;
- payment processing;
- accounting and bookkeeping;
- online forms; and
- Peer Connection through Slack.
These providers may process personal information on behalf of Chris Jones Therapy where this is necessary to provide their services.
Only services considered appropriate for the nature of the information being processed are used, and access is limited to what is necessary for the relevant purpose.
Some providers may process or store information outside the United Kingdom. Where personal information is transferred internationally, Chris Jones Therapy relies on the applicable legal mechanisms and safeguards provided for under UK data protection law, such as UK adequacy regulations or approved contractual safeguards.
Peer-to-Peer Information Sharing
Where you voluntarily choose to participate in Peer Connection, an accountability relationship or a peer-led group, you decide what information you disclose to other members.
Other members are not employees, therapists, agents or data processors acting on behalf of Chris Jones Therapy. Information that you voluntarily disclose directly to another member is therefore outside the direct control of Chris Jones Therapy.
Guidance is provided encouraging members to respect confidentiality and the privacy of others, but Chris Jones Therapy cannot monitor or guarantee how another individual handles information you choose to share with them.
Confidentiality and Disclosure
Information shared in counselling, coaching and programme work is treated confidentially.
There may, however, be limited circumstances in which information needs to be disclosed without your consent. These may include situations where disclosure is required by law, ordered by a court, necessary to protect vital interests, or otherwise justified by a serious safeguarding concern.
Where reasonably possible and appropriate, I would seek to discuss such a disclosure with you before taking action.
Information may also be disclosed where necessary for the establishment, exercise or defence of legal claims.
Retention of Information
Personal information is retained only for as long as it is reasonably necessary for the purpose for which it was collected and to meet applicable professional, legal, insurance, accounting or regulatory requirements.
Clinical and therapeutic records may be retained for up to seven years following the end of our work together, unless there is a specific reason why a different retention period is appropriate or required.
Administrative and financial records may be retained for the periods required by applicable accounting and tax requirements.
Information associated with online accounts and programme participation may be retained while you continue to have access to the relevant service or resources.
Where information is no longer required, it will be securely deleted or anonymised where reasonably practicable.
Third-party platforms may operate their own retention and deletion arrangements, which may also apply to information processed through those services.
Your Data Protection Rights
Depending on the circumstances and the lawful basis under which your information is processed, UK data protection law may give you rights including:
- Access – to request a copy of personal information held about you;
- Rectification – to ask for inaccurate or incomplete information to be corrected;
- Erasure – to ask for personal information to be deleted in certain circumstances;
- Restriction – to ask for the use of your information to be restricted in certain circumstances;
- Data portability – to receive certain information in a portable format where this right applies;
- Objection – to object to certain processing based on legitimate interests; and
- Withdrawal of consent – to withdraw consent where consent is relied upon as the basis for processing.
These rights are not absolute and whether a particular right applies will depend on the circumstances and the legal basis for processing.
In particular, information may sometimes need to be retained despite a request for deletion, for example where retention is necessary to comply with a legal obligation or to establish, exercise or defend legal claims.
You have the right to object to processing of your personal information where processing is based on legitimate interests.
Requests relating to your personal information can be made by emailing info@chrisjonestherapy.co.uk.
Data Breaches
Chris Jones Therapy takes appropriate steps to prevent, identify and respond to personal data breaches.
Where a personal data breach occurs, the circumstances and potential risks will be assessed. Where required by law, a notifiable breach will be reported to the Information Commissioner’s Office without undue delay and, where feasible, within 72 hours of becoming aware of it.
Where a breach is likely to result in a high risk to the rights and freedoms of an affected individual, that individual will also be informed without undue delay.
Changes to This Privacy Policy
This Privacy Policy may be updated from time to time to reflect changes to services, technology, legal requirements or the way Chris Jones Therapy processes personal information.
The current version will be made available through the Chris Jones Therapy website.
Questions, Requests and Complaints
If you have questions about this Privacy Policy, wish to exercise your data protection rights, or have concerns about how your personal information is being handled, please contact:
Chris Jones Therapy
Email: info@chrisjonestherapy.co.uk
ICO registration number: ZB607936
If you are not satisfied with the response, you also have the right to raise a concern with the Information Commissioner’s Office (ICO), the UK’s data protection regulator.