SWV | Founder Therapy
Data Controller: Simone Westcott‑Villiers
Last updated: January 2026

1. Introduction

Your privacy is very important to me. This Privacy Policy explains how I collect, use, store, and protect your personal data in line with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

This policy applies to clients, prospective clients, website visitors, and anyone who contacts SWV | Founder Therapy.

2. Who I Am

I am an independent CBT therapist trading as SWV | Founder Therapy.

Contact details:
Simone Westcott‑Villiers
Email: simonewestcottcbt@gmail.com
ICO Registration Number: ZC009243

3. The Personal Data I Collect

I may collect and process the following types of personal data:

a) Personal details

  • Name

  • Date of birth

  • Address

  • Email address

  • Telephone number

  • Emergency contact details

b) Special category (health) data

  • Information you share during assessments and therapy sessions

  • Mental health history and presenting difficulties

  • Session notes and treatment plans

c) Administrative and financial data

  • Appointment records

  • Invoices and payment records

  • Insurance details (e.g. AXA, BUPA membership and authorisation numbers)

d) Website and booking data

  • Information submitted via contact forms or booking systems

  • Limited technical data such as IP address (where applicable)

4. How Your Data Is Collected

Your data may be collected when you:

  • Contact me by email, phone, or via my website

  • Book an appointment online

  • Complete assessment or consent forms

  • Engage in therapy sessions

  • Use insurance-funded services

5. Why I Collect Your Data (Lawful Basis)

Under UK GDPR, I must have a lawful basis for processing your data. These include:

  • Provision of healthcare – to assess, plan, and deliver therapy

  • Consent – where you have given explicit consent

  • Contract – to fulfil the agreement for therapy services

  • Legal obligation – for record keeping, insurance, or regulatory requirements

  • Legitimate interests – for practice administration and service improvement

Special category (health) data is processed for the purpose of healthcare provision by a qualified professional.

6. How Your Data Is Stored

Your data is stored securely using GDPR‑compliant systems, which may include:

  • Secure clinical record systems (e.g. WriteUpp)

  • Encrypted email and password‑protected devices

  • Secure cloud‑based storage

I take appropriate technical and organisational measures to protect your data from unauthorised access, loss, or misuse.

7. Who I Share Your Data With

Your data is treated as confidential. I only share it when necessary and appropriate, including:

  • With your consent

  • With health insurers (e.g. AXA, BUPA) for authorisation and billing purposes

  • With other healthcare professionals if clinically necessary and agreed

  • If required by law or where there is a serious risk of harm to you or others

I never sell your data or share it for marketing purposes.

8. How Long I Keep Your Data

I retain therapy records in line with professional and legal guidelines:

  • Adult client records: 7 years after therapy ends

  • Financial records: 6 years for tax purposes

After this period, data is securely deleted or destroyed.

9. Your Rights

Under UK GDPR, you have the right to:

  • Access your personal data

  • Request correction of inaccurate data

  • Request erasure (where applicable)

  • Restrict or object to processing

  • Request data portability

  • Withdraw consent (where processing is based on consent)

  • Lodge a complaint with the Information Commissioner’s Office (ICO)

To exercise any of these rights, please contact me using the details above.

10. Cookies and Website Use

If my website uses cookies or analytics, these will be limited to essential or basic performance purposes. You will be informed where required.

11. Changes to This Policy

This Privacy Policy may be updated from time to time. The most recent version will always be available on my website.

12. Contact

If you have any questions or concerns about this Privacy Policy or how your data is handled, please contact:

Simone Westcott‑Villiers
SWV | Founder Therapy
Email: hello@simonecbt.com
ICO Registration Number: ZC009243