Privacy Policy
Effective date: 2 January 2026
Last updated: June 2026
Who we are
Mettle Counselling and Psychotherapy is a sole trader practice operating in England and Wales. For the purposes of UK data protection law, Chris Brotherton is the data controller.
Data controller: Chris Brotherton
Email: info@mettletherapy.co.uk
Phone: 01704 660167
Website: mettletherapy.co.uk
Information we collect
We may collect personal information when you contact us by email, phone, WhatsApp, or other messaging platforms; when you book or arrange counselling services; and when you engage in counselling or psychotherapy.
This may include:
- Name and contact details (email, phone)
- Information shared in enquiries
- Appointment and scheduling information
- Emergency contact details, where appropriate
- Administrative and payment records
During counselling, special category data may also be processed, including information relating to your health or wellbeing. This is handled with additional care and under appropriate legal bases as described below.
Website visitors: this site uses Google Analytics 4, loaded through Google Tag Manager, to understand how the site is used – but only after you accept analytics via the consent banner. If you decline, no analytics cookies are set. Your consent choice and your theme preference (light or dark mode) are stored in your browser’s local storage. Our host, Vercel, also collects anonymous, cookieless performance metrics. See the Cookie Policy for full details.
If you subscribe to the blog or download a resource, we store your name, email address and subscription status so we can send you what you asked for. Every email includes a one-click unsubscribe link, and you can ask us to delete your details at any time.
Where information comes from
Personal information is usually obtained directly from you. In some cases it may also come from:
- Referral organisations
- Legal or regulatory bodies
- Professional partners involved in service delivery
How we use your information
Personal information is used to:
- Respond to enquiries
- Arrange and deliver counselling services
- Maintain professional records
- Meet safeguarding and legal responsibilities
- Manage payments and administrative records
Lawful bases for processing
Under UK GDPR, personal data is processed on the following lawful bases:
Contract
Information is processed in order to provide the counselling services you have requested.
Consent
In some situations, information is processed with your explicit consent. You may withdraw consent at any time by contacting us, though this will not affect processing that has already taken place.
Vital interests
Information may be processed where necessary to protect the life, health, or safety of you or another person.
Legal obligation
Information may be processed where required to comply with legal or regulatory duties.
How long we keep it
Clinical records
Records are retained for 7 years after the final session, in line with NCPS guidance and professional insurance requirements.
Financial records
Invoices and financial records are retained for 7 years to meet HMRC requirements.
Payments made electronically are processed by third-party payment providers. Mettle Counselling and Psychotherapy does not have access to or store card details or bank payment credentials. We receive only the information necessary to confirm payment and maintain accounting records.
Website data
Enquiry emails are kept as part of administrative records. Newsletter subscriptions are kept until you unsubscribe or ask for deletion. Client portal accounts are deleted on request once our work together has ended.
When data is no longer required it is securely deleted or destroyed.
Who processes your data
A small number of carefully chosen services process data on our behalf to run this website and the practice. Each acts under contract as a data processor:
- Vercel – hosts this website and collects anonymous, cookieless performance metrics (privacy policy)
- Google – provides consent-gated analytics via Google Tag Manager and Google Analytics 4 (privacy policy)
- Calendly – handles appointment booking (privacy policy)
- Resend – sends practice emails such as enquiry confirmations and blog updates (privacy policy)
- Upstash – provides the secure database that stores client portal accounts, newsletter subscriptions and anonymous blog reactions (privacy policy)
Sharing information
All information is treated confidentially. Personal data is not sold or shared for marketing purposes. It may be shared only where necessary:
- Where required by law
- Where there is a safeguarding risk involving a child or vulnerable adult
- Where there is a serious and imminent risk to your life or the life of another person
- With regulatory or legal authorities where required
- With your clinical supervisor (in anonymised form), as required by the NCPS
- With Calendly, for scheduling purposes only (see calendly.com/privacy)
Where possible, we would discuss any disclosure with you before it takes place.
Your rights
Under UK GDPR you have the right to:
- Access the personal data we hold about you
- Request correction of inaccurate data
- Request deletion in certain circumstances
- Restrict or object to processing
- Data portability
- Withdraw consent where consent is the lawful basis
To exercise any of these rights, contact info@mettletherapy.co.uk. We will respond within one month.
One honest caveat on deletion: clinical and financial records must be kept for the retention periods above to meet NCPS and HMRC obligations, so those cannot be erased early. Everything else – newsletter details, portal accounts, enquiry records that are no longer needed – can be.
Complaints
If you have concerns about how your data has been handled, please contact us in the first instance. If you remain dissatisfied, you have the right to lodge a complaint with the Information Commissioner’s Office (ICO):
Information Commissioner’s Office
Wycliffe House, Water Lane
Wilmslow, Cheshire, SK9 5AF
Helpline: 0303 123 1113
Changes to this policy
We may update this policy from time to time to reflect legal, technical, or operational changes. The “Last updated” date at the top of this page will always indicate the latest version.
Professional standards
Practice adheres to the NCPS Code of Ethical Practice and professional standards. Complaints about professional conduct can be directed to the National Counselling and Psychotherapy Society at ncps.com.
By engaging in counselling services with Mettle Counselling and Psychotherapy, you acknowledge that this privacy notice has been provided and that you understand how your personal information may be used.