Policies
Confidentiality
Confidentiality is fundamental to our consultancy. Except for cases involving a significant risk of harm to yourself or others, or where disclosure is legally required. These limits to confidentiality are in accordance with professional ethical standards.
Professional Boundaries
All sessions are conducted professionally and within appropriate boundaries in line with the BACP Ethical Framework. Balm & Nook does not offer crisis intervention. We are not an emergency service. If you are in crisis, please contact your GP, call 111 or 999. You can also reach out to Samaritans, Calm and Shout for further urgent support.
Insurance
Balm & Nook holds current professional liability insurance in the UK.
Privacy and Data Protection
Privacy and data protection information
Your privacy is very important to me. I comply with the General Data Protection Regulation (GDPR) and process your data responsibly and securely. I hold and use personal information to provide counselling and coaching services under legitimate interest. The information below explains what data is collected, why it is collected, how long it is kept, and your rights regarding your personal information.
​
The data controller for Balm & Nook is Tosin Ogwe. You can contact me about any data protection matter at tosin@balmandnook.com.
When you contact me or engage with Balm & Nook services, I may collect:
​
-
Your name and contact details
-
GP details [For coaching and counselling services]
-
Information about your circumstances [For coaching and counselling services]
-
Session notes and records
-
Payment information (where applicable)
-
Any other information you voluntarily share
Why is it collected?
Your data is used to:​​
​
-
Deliver consulting, coaching and counselling services
-
Maintain professional records
-
Communicate with you
-
Process health-related information [For coaching and counselling services]
-
Support clinical supervision [For coaching and counselling services]
How is your data stored?
Client records and session notes are stored securely on Google Drive, protected by passwords and two-factor authentication. Sessions take place via Google Meet. Email communication is through Gmail. All platforms employ encrypted communication and industry-standard security measures to protect your data.
Who I share your data with
-
For clinical supervision (anonymised, with your explicit consent) [For coaching and counselling services]
-
Where legal requirements or a serious risk of harm exist
How long will I keep your data?
-
Coaching records: Maximum three years
-
Counselling records: Maximum seven years
After this period, records are securely deleted using permanent deletion methods.
Your rights
Under UK GDPR, you have the right to:
​​
-
Access, correct, delete, restrict, or object to the processing of your personal data
-
Withdraw consent for data processing at any time
-
Contact me at tosin@balmandnook.com. I will respond within one calendar month
Withdrawing Consent
You may withdraw your consent for data processing at any time. To do this, contact me at tosin@balmandnook.com. If you withdraw consent, I will stop processing your data unless legally required to retain it.
Data Breach Notification
If a breach affects your personal data, I will notify you and the ICO within 72 hours of becoming aware, unless the breach is unlikely to risk your rights or freedoms. You will be informed of what happened, which data was affected, and the steps taken to resolve it.
How to make a complaint
If you have concerns about how your data is being processed, contact me first at tosin@balmandnook.com. If you are not satisfied, you can lodge a complaint with the ICO at ico.org.uk or call 0303 123 1113.