Review draft, pending Lydia / legal review, not yet in force

Your data & confidentiality

Privacy Policy

Your privacy matters, and in counselling, confidentiality is part of the work itself. This policy explains what personal information Go Well Services collects through this website and through the counselling relationship, how it is used and protected, and the rights you have over it. It is written to comply with the UK GDPR and the Data Protection Act 2018.

Two kinds of information, one promise. This page covers both the everyday data a website collects (an enquiry, a cookie) and the far more sensitive information shared in counselling. Both are treated with care; the sensitive material is held to the stricter standard set out below.

1. Who we are (the data controller)

Go Well Services is the counselling practice of Lydia Nightingale (BA Hons, Dip, MBACP), a person-centred counsellor based in Uxbridge, working in person and online across the UK. For the purposes of data protection law, the data controller is:

  • Lydia Nightingale, trading as Go Well Services
  • Address: Uxbridge, Greater London UB8 (full correspondence address available on request)
  • Email: lydia@gowellservices.co.uk
  • WhatsApp: 07495 517 512

Counsellors who hold personal data are generally required to register with the Information Commissioner's Office (ICO) and pay a data-protection fee, unless a specific exemption applies. Go Well Services's ICO registration reference is ZC234929.

2. The information we collect

Depending on how you interact with Go Well Services, we may hold:

Enquiry & contact details
Your name, email address, phone number and the content of any message when you make an enquiry, request a consultation, or contact us.
Counselling records (sensitive / special category data)
If you become a client: brief session notes, contact details, your GP details (where you choose to share them), an emergency contact, and information you disclose in sessions. Much of this is health data, a "special category" under Article 9 of the UK GDPR, given extra legal protection (see section 4).
Payment information
A record that a session was paid for and the method used. Go Well Services does not store your card or bank details; where a payment provider is used, it handles those securely on our behalf.
Website & technical data
Standard server logs (IP address, browser type, pages visited) generated when any website is accessed, and limited information stored in your browser (see section 7, Cookies). This website does not currently run advertising or third-party analytics trackers. If any analytics, booking or newsletter tool is added in future, it will be listed here.

3. How we use your information, and our lawful basis

Under UK GDPR we must have a lawful basis for each use of your data:

What we do Why Lawful basis (Article 6)
Respond to your enquiry / arrange a consultation To answer you and assess whether we're a good fit Legitimate interests, and/or steps to enter a contract at your request
Provide counselling and keep session notes To deliver the service safely and ethically Contract; and for health data, Article 9 (see section 4)
Take and record payment To manage the practice and meet accounting obligations Contract; legal obligation (tax/accounting records)
Keep records after counselling ends Professional, insurance and legal requirements Legal obligation; legitimate interests
Keep the website secure and working To run the site and prevent misuse Legitimate interests

We do not sell your data, and we do not use it for marketing without your explicit consent.

4. Sensitive (special category) health data

Counselling notes and anything you tell us about your physical or mental health are special category data. In addition to a basis in Article 6, we rely on the UK GDPR Article 9 conditions for processing it:

  • Explicit consent (Article 9(2)(a)), you agree, in the working agreement at the start of counselling, to our keeping confidential session records; and
  • Provision of health/social care (Article 9(2)(h)), processing carried out by a professional bound by a duty of confidentiality.

We keep only what is necessary, store it securely (see section 8), and share it only as set out in sections 5 and 6.

5. Confidentiality, and its limits

Everything you share in counselling is treated as confidential, in line with the BACP Ethical Framework to which Lydia is bound. We will not normally tell anyone that you are a client, or what is discussed, without your consent.

There are a small number of situations where a counsellor may need to break confidentiality. These are explained at the outset and, wherever possible, discussed with you first:

When confidentiality may be limited. Where there is a serious and imminent risk of harm to you or to another person (including a child or vulnerable adult); where the law requires disclosure (for example under safeguarding duties, a court order, or certain statutory obligations such as those relating to terrorism or money laundering); or where disclosure is needed to prevent or investigate a serious crime.

Even then, we share only what is necessary, with the appropriate person or authority.

6. Who we share information with

We keep your information private and share it only where necessary:

Clinical supervision
Like all ethical counsellors, Lydia discusses her work in regular professional supervision to maintain quality and safe practice. Clients are referred to in a way that protects your identity wherever possible; the supervisor is also bound by confidentiality.
Your GP or other professionals
Only with your consent, or in the risk/legal situations in section 5.
Safeguarding or legal authorities
Only where required by law or to prevent serious harm (see section 5).
Service providers (data processors)
Trusted suppliers who help run the practice, for example email hosting, secure file storage, and a secure video service for online sessions. These act on our instructions under a contract that requires them to protect your data. Where a provider is based outside the UK, we ensure appropriate safeguards are in place.

We never sell or rent your personal data to anyone.

7. Cookies and your browser

This website aims to use as little tracking as possible.

  • Essential/local storage. Some pages store small amounts of information in your own browser to make a feature work (for example, the private intake questionnaire saves your progress on your device so you don't lose it). This stays on your device and is not a tracking cookie.
  • Analytics & advertising. We do not currently use third-party analytics or advertising cookies. If an analytics or booking tool is added in future, we'll list it here and add a cookie/consent mechanism if required.

You can clear or block cookies and local storage in your browser settings at any time.

8. How we store and protect your data

We take the security of your information seriously:

  • This website is served over an encrypted HTTPS connection.
  • Counselling records are kept securely, and access is restricted to Lydia.
  • We keep the minimum information necessary and review what we hold.

9. How long we keep it

We keep personal data only as long as necessary:

  • Enquiries that don't become counselling, kept for up to 12 months, then deleted.
  • Counselling records, retained after therapy ends for the period required by our insurer and professional and legal obligations (typically several years), then securely destroyed.
  • Financial records, kept as long as tax and accounting law requires.

10. Your rights

Under UK GDPR you have the right to:

  • Be informed about how your data is used (this policy);
  • Ask for a copy of the data we hold about you (a "subject access request");
  • Ask us to correct inaccurate data;
  • Ask us to delete data, though we may need to keep counselling records for the retention period in section 9 to meet legal and insurance obligations;
  • Ask us to restrict or object to certain processing;
  • Request portability of data you provided to us;
  • Withdraw consent at any time, where we rely on consent.

To exercise any of these, contact us using the details in section 1. We will respond within one month. There is normally no charge.

11. Complaints

If you have a concern about how Go Well Services has handled your data, please contact us first so we can put it right. You also have the right to complain to the UK supervisory authority:

Information Commissioner's Office (ICO), ico.org.uk/concerns · helpline 0303 123 1113 · Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF.

For concerns about Lydia's professional conduct as a counsellor, you can also contact the British Association for Counselling and Psychotherapy (BACP).

12. Children's privacy

This website and the counselling service are intended for adults (18 and over). Go Well Services does not work with under-18s, and we do not knowingly collect data from children through this website.

13. Changes to this policy

We may update this policy from time to time. The "last reviewed" date at the top of the page shows when it was last checked. Material changes affecting current clients will be shared with them directly.


How this page was prepared. This policy was drafted with AI assistance and is provided for review. It is not legal advice and is not yet in force. Lydia and a qualified adviser should confirm the bracketed details and approve the wording before publication.

Registered, accredited & trained with

Book