Privacy, Safeguarding & Data Protection Policy

Paula Miles Therapy is the practice of Paula Medeiros Borges Miles, a psychodynamic psychotherapist working in person in Basingstoke, Hampshire, and online across the UK. I am the data controller for the information described in this policy.

You can reach me at enquiries@paulamilestherapy.com. My practice is based at Corinthian Close, Basingstoke, RG22 4TN.

I collect and process only the information necessary to provide professional psychotherapy, in line with ethical and legal obligations.

Personal information

• Your full name
• Contact details, such as your email address and phone number
• Emergency contact details, where relevant

Sensitive information

• Information relating to your mental health and emotional wellbeing
• Therapy notes, intake forms and assessments
• Any relevant medical or background information you choose to share

This information is collected only with your consent or as necessary to deliver therapy safely and professionally.

Your personal information is used only for lawful and legitimate purposes:

• To deliver psychotherapy sessions
• To maintain clinical records required by professional standards
• To communicate with you about sessions, invoices or resources
• To ensure ethical, safe and appropriate therapeutic practice
• To comply with legal, safeguarding or regulatory obligations

I will never sell or share your information for marketing purposes.

Confidentiality is the foundation of psychotherapy. Everything you share is treated with respect and discretion. However, under the BACP Ethical Framework and UK safeguarding law, there are specific limits to confidentiality.

I may need to share information if:

• You are at risk of serious harm to yourself or another person
• A child or vulnerable adult is at risk of abuse or neglect
• I am required by law, for example by a court order or under terrorism or money laundering legislation
• Disclosure is necessary to prevent a serious crime

Whenever possible, I will always discuss any concerns with you before taking action, unless doing so would increase the level of risk.

In accordance with Article 6 and Article 9 of the UK GDPR, your personal information is processed under the following lawful bases:

• Contract: for the delivery of the therapy services you have requested
• Consent: for non-essential contact
• Legal obligation: for professional and regulatory compliance
• Vital interests: in rare cases, to protect your life or prevent harm
• Legitimate interest: to ensure safe practice and communication

All information is stored and protected in line with GDPR standards:

• Electronic notes are stored in encrypted, password-protected systems
• Devices are secured with multi-factor authentication
• Access is restricted solely to me
• Backups are encrypted and updated regularly

Client records are retained for seven years after the end of therapy, or longer where legally required. After this period, all information is securely deleted or destroyed.

You have the right to:

• Request a copy of the information I hold about you
• Correct inaccurate information
• Request deletion of your information, where legally appropriate
• Withdraw consent for non-essential processing
• Restrict or object to certain processing activities

If you believe your information is not being handled lawfully, you can lodge a complaint with the Information Commissioner's Office at www.ico.org.uk.

All requests should be made in writing to enquiries@paulamilestherapy.com.

This website does not use advertising or analytics cookies, and it does not track your browsing. The contact form opens in your own email app, so nothing you write is stored on this website.

I use Carepatron, a secure practice management system, for appointment booking, online video sessions, invoicing and card payments. Carepatron is required to comply with GDPR and to handle your information securely.

As a BACP-registered psychotherapist, I adhere to UK safeguarding laws, including the Children Act 1989, the Care Act 2014 and Working Together to Safeguard Children (2018).

I am committed to:

• Protecting children, young people and vulnerable adults from harm
• Taking action where risk or abuse is identified
• Cooperating with safeguarding authorities when necessary
• Maintaining accurate records of any safeguarding concerns

All actions are taken in line with the BACP Ethical Framework for the Counselling Professions and the Safeguarding Adults Principles: empowerment, prevention, proportionality, protection, partnership and accountability.

This policy may be updated periodically to reflect legal, ethical or practice changes. The latest version will always be available on this page.

Last updated: October 2026

If you have any questions or concerns about how your information is handled, please contact me at enquiries@paulamilestherapy.com.