Privacy Policy

Last updated: June 2026

1. Who I am
I am Megan Baker, a psychological therapist trading as MB Counselling & Coaching. My contact email is megan.baker@mbcounselling.care. I am the data controller for the personal information you share with me.

I am registered with and work within the ethical framework of the British Association for Counselling and Psychotherapy (BACP).

2. What information I collect
When you contact me or engage in therapy, supervision, or training with me, I may collect and hold the following information:

  • Your name, email address, and contact details
  • Information you share about your mental or physical health, and personal circumstances relevant to your care
  • Session notes and records of our work together
  • Correspondence between us (email, contact form submissions)
  • For training enquiries: your professional role and organisation

I do not collect payment card details directly — any payment processing is handled securely by a third-party provider.

3. Why I collect it and the legal basis
Under UK GDPR, I process your personal data on the following legal bases:

  • Contract — to provide the therapy, supervision, or training services you have requested
  • Legitimate interests — to manage my practice, maintain professional records, and ensure continuity of care
  • Legal obligation — where I am required by law or professional body requirements to retain records
  • Vital interests — in situations involving serious risk to your safety or the safety of others

For special category data (health and mental health information), I rely on Article 9(2)(h) — processing necessary for the provision of health or social care — alongside my professional obligations as a BACP member.

4. How I use your information
I use your personal information to:

  • Provide and manage your therapy, supervision, or training
  • Keep clinical notes and records as required by my professional obligations
  • Contact you regarding your appointments or enquiries
  • Fulfil legal and safeguarding obligations where they arise

I will never sell your personal data or share it with third parties for marketing purposes.

5. Who I share your information with
Your information is kept strictly confidential. There are limited circumstances in which I may need to share information:

  • Clinical supervision — I discuss my clinical work with my supervisor as required by BACP ethical guidelines. Your identity is protected wherever possible
  • Safeguarding — if I have serious concerns about your safety or the safety of a child or vulnerable adult, I may be required to share information with relevant authorities
  • Legal obligation — if required to do so by a court order or other legal requirement
  • Multi-disciplinary working — with your explicit consent, I may liaise with your GP, psychiatrist, or other professionals involved in your care

6. How long I keep your information
I retain client records for a minimum of 7 years following the end of our work together, in line with BACP guidance and professional indemnity insurance requirements. For records relating to children or young people, records are kept until the individual’s 25th birthday, or 26th if they were 17 at the end of treatment.

After this period, records are securely destroyed.

7. How I store and protect your information
Your personal data is stored securely, with access restricted to me only. I take reasonable technical and organisational measures to protect your information from unauthorised access, loss, or disclosure. Any electronic records are password protected and stored on encrypted devices.

8. Cookies and website data
My website may use cookies to understand how visitors use the site and to improve your experience. You can control cookie settings through your browser. I do not use your browsing data for advertising purposes.

If you submit the contact form on this website, the information you provide is sent directly to me by email and stored securely. It is not shared with third parties.

9. Your rights
Under UK GDPR, you have the right to:

  • Access the personal data I hold about you
  • Correct any inaccurate information
  • Request deletion of your data (subject to my legal and professional retention obligations)
  • Object to or restrict certain types of processing
  • Data portability — to receive your data in a structured, commonly used format
  • Withdraw consent at any time where processing is based on consent

To exercise any of these rights, please contact me at megan.baker@mbcounselling.care. I will respond within one calendar month.

10. Complaints
If you have a concern about how I handle your personal data, you have the right to complain to the Information Commissioner’s Office (ICO):

Website: ico.org.uk
Telephone: 0303 123 1113

You may also wish to raise any concerns with me directly in the first instance.

11. Changes to this policy
I may update this privacy policy from time to time. The most current version will always be available on this website. The date at the top of this page indicates when it was last updated.

Scroll to Top