Privacy & Data

Privacy Policy

Last updated: May 2026

This policy explains how Dr Emily Coopey, trading as ECPsychology, collects, uses, stores and protects your personal information. It applies to information submitted via this website and to information collected in the course of providing clinical psychology services.

ECPsychology is committed to handling your information lawfully, transparently and in line with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

ICO Registration Dr Emily Coopey is registered as a data controller with the Information Commissioner's Office (ICO). Registration number: C1830879. You can verify this at ico.org.uk.

Who is responsible for your data?

The data controller is Dr Emily Coopey, trading as ECPsychology. If you have any questions about how your data is handled, you can contact her at emily@ecpsychology.co.uk.

What information is collected, and when?

When you make an enquiry via email

When you contact ECPsychology by email, the following information may be collected:

Your name and email address
Any personal information you choose to share in your message

This information is used solely to respond to your enquiry. It is not added to any mailing list, shared with third parties, or used for marketing.

When you become a client

If you proceed with therapy, additional information is collected and handled in line with the Client Contract Information Form, which sets out in detail:

What personal and clinical data is collected
How it is stored (Microsoft OneDrive, encrypted)
How long it is retained (7 years post-therapy, per HCPC guidelines)
The limited circumstances in which it may be shared
Your rights under UK GDPR

You will be asked to sign the Client Contract before any sessions begin.

Legal basis for processing

Enquiry data is processed on the basis of legitimate interests — specifically, responding to a request you have made. Clinical data is processed on the basis of contract (to provide the therapy services agreed) and, where relevant, legal obligation (HCPC record-keeping requirements).

Where sensitive (special category) health data is processed, the additional legal basis is explicit consent and/or the provision of health care services.

How is your information stored?

Enquiry emails are held in a professional email account. If you do not proceed to therapy, enquiry emails are deleted within six months.

Client records are stored securely on Microsoft OneDrive. Data is encrypted in transit and at rest. Access is restricted to Dr Coopey, except in the limited circumstances described in the Client Contract.

Does this website use cookies?

This website does not use cookies, tracking scripts, or analytics tools. No data is collected about your visit. Google Fonts are loaded from Google's servers, which may involve a technical connection to Google's infrastructure, but no personal data is stored or processed by ECPsychology as a result.

Is your data shared with anyone?

Enquiry data is never sold, shared with third parties, or used for marketing.

Clinical data may be shared in limited circumstances, as set out in the Client Contract:

With a clinical supervisor (first name only; no contact or financial details)
With your insurer, with your explicit consent
With emergency services or your GP if there is a serious risk of harm
If required by a court order or legal obligation

ECPsychology uses Heidi, an AI note-taking tool, for session summaries. Its use is optional and governed by a separate AI Use Information and Consent Form. Heidi does not share data with third parties or use it to train AI models. Full details are provided in that form.

Your rights

Under UK GDPR, you have the right to:

Access the personal information held about you
Have inaccurate information corrected
Request deletion of your data (subject to legal retention obligations)
Object to or restrict processing in certain circumstances
Lodge a complaint with the ICO if you believe your data has been mishandled

To exercise any of these rights, please contact emily@ecpsychology.co.uk. Requests will be responded to within 30 days. Where therapy records must be retained under HCPC guidelines, deletion before the end of the 7-year retention period may not be possible.

Complaints

If you have a concern about how your data has been handled, please raise it with Dr Coopey in the first instance. If you remain unsatisfied, you have the right to complain to the Information Commissioner's Office:

Website: ico.org.uk
Helpline: 0303 123 1113

Changes to this policy

This policy may be updated from time to time. The date at the top of this page will reflect when it was last revised. Continued use of this website following any changes constitutes acceptance of the updated policy.