Privacy Notice
Eugenie Young | Counselling, Psychotherapy, Bio-Resonance & Numerology | Updated 25 October 2026
1 Who is responsible for your information
I am Eugenie Young, an independent practitioner and the data controller for personal information collected through my practice. You can contact me about privacy, access requests or concerns at info@eugenieyoung.com. Website: www.eugenieyoung.com.
2 What Data I collect
Depending on your enquiry and the service you receive, I may collect your name, date of birth, contact details, appointment history, correspondence, intake-form responses, payment records and relevant personal history. For counselling, psychotherapy and bio-resonance, this may include information about physical or mental health and other sensitive circumstances that you choose to share. For numerology, I may use your name, date of birth and information you provide for a reading. Bio-resonance clients may supply hair or nail samples for agreed work. I aim to collect only information reasonably needed for the relevant purpose.
3 Why I use your information
I use personal information to answer enquiries, assess and arrange appointments, provide agreed services, keep proportionate professional records, manage payments, meet applicable legal duties and address safety or safeguarding concerns. Where appropriate, I may discuss work in professional supervision using information minimised or anonymised as far as practicable.
4 Legal grounds for processing
For enquiries and services you request, I generally rely on steps towards a contract or performance of a contract (UK GDPR Article 6(1)(b)), where applicable. I rely on legal obligation (Article 6(1)(c)) for information I must retain for tax or other legal requirements. For proportionate practice administration, security and the establishment, exercise or defence of legal claims, legitimate interests (Article 6(1)(f)) may apply after balancing those interests against your rights. Where processing is genuinely optional, such as certain marketing communications or non-essential cookies, I seek consent as required.
Health and other special-category information requires an additional Article 9 condition. Depending on the purpose and the legal requirements met, this may be explicit consent (Article 9(2)(a)) or another applicable condition, such as provision of health or social care (Article 9(2)(h)). Safeguarding and legal-claims processing may rely on different applicable conditions. I assess the relevant condition for each purpose and do not treat consent to treatment as automatically equivalent to data-protection consent.
5 How your information is held
My website and intake forms are hosted on Squarespace. Squarespace retains submitted intake forms, and I also receive full responses in my professional Google Workspace email account. I keep paper records and physical hair or nail samples in locked storage. Electronic records and correspondence are protected by access controls and other proportionate security measures. I do not publish client information or share identifiable material for promotional purposes without an appropriate separate permission.
6 Who may have access
Information may be processed by service providers necessary to operate my practice, including Squarespace for the website and forms and Google Workspace for professional email. Depending on how an appointment is arranged, other booking, video-call or payment providers may process limited information needed to provide their service. I may disclose information where required by law or where an appropriate safeguarding or serious-risk justification applies. I share only what is necessary for the purpose.
7 Processing outside the UK
Some service providers or their subcontractors may process or access information outside the UK. Where UK data protection law requires safeguards for international transfers, I use providers with applicable transfer arrangements and assess whether further safeguards are needed. You can contact me for further information about relevant processing arrangements.
8 How long I keep information
I normally keep adult clinical and treatment records for seven years after the last appointment, then review and securely destroy or anonymise them unless a specific legal, safeguarding, professional, or claims-related reason justifies longer retention. Records relating to children and young people are subject to a separate, age-appropriate retention assessment and may be held longer where justified. I review older records rather than keeping them indefinitely merely in case a client returns. I normally retain hair and nail samples used for bio-resonance for up to three years after the most recent treatment to support agreed follow-up work, then securely destroy them, unless earlier destruction is appropriate. Enquiries that do not lead to treatment and financial records follow separate, purpose-based retention periods, including applicable HMRC requirements.
9 Your rights
Subject to the circumstances and applicable exemptions, you can ask to access your personal information, correct inaccurate information, request erasure, restrict processing, object to certain processing and request portability where applicable. Where I rely on consent, you may withdraw it. Requests can be sent to info@eugenieyoung.com. Some information may need to be retained despite an erasure request where a lawful exception applies. I will explain any refusal and the reasons.
10 Website cookies
My website uses essential cookies and may use optional analytics or similar technologies. Where consent is required, optional cookies should not be set before you choose to accept them. You can accept, decline or manage optional cookies using the website’s cookie controls. Your choices can be changed using the available cookie-preference control.
11 Questions and complaints
If you have a concern about how I handle your information, please contact info@eugenieyoung.com. You can also complain to the Information Commissioner’s Office (ICO) at www.ico.org.uk. I may update this notice as my services or data-handling arrangements change.