top of page

Privacy Policy

Last updated: 15 November 2025

 

This privacy policy explains how I, Dr Elisabeth Norton, Clinical Psychologist, collect, use and protect your personal information when you visit my website or work with me in therapy.

 

I follow the UK GDPR, the Data Protection Act 2018, and the HCPC Standards of Conduct, Performance and Ethics, all of which require me to keep your information safe, accurate, and confidential.

Who I am

Data controller:
Dr Elisabeth Norton BSc (Hons), Clinical.Psy.D, C.Pscychol

 

Registered with the HCPC (Health and Care Professions Council)

  • HCPC registration no: PYL36730 

  • BPS membership no: 743114

 

Email: drelisabethnorton@proton.me

 

Please contact me if you have any questions about this policy or how your data is handled.

The information I collect

To provide safe and effective psychological services, I may collect:

 

  • Your name and contact details

  • Date of birth and GP details

  • Relevant medical or mental health information

  • Session notes and treatment plans

  • Emails or messages you send to me

  • Payment or insurance details (if relevant)

​

My website may automatically collect basic technical information (e.g. IP address, browser type, pages visited) to help it function properly.

Why I collect your information

I only use your information for purposes directly related to providing psychological care and running my practice safely. This includes:

​

  • Responding to enquiries and arranging appointments

  • Carrying out assessment and therapy

  • Keeping accurate clinical records, as required by the HCPC

  • Contacting you about sessions or important updates

  • Processing payments or insurance claims

  • Meeting legal and safeguarding responsibilities

​

The legal bases for processing your data under UK GDPR include:

​

  • Contract – to provide psychological services

  • Consent – when you agree to specific sharing or communication

  • Legitimate interests – to run my practice safely and efficiently

  • Legal obligations – such as record-keeping, safeguarding, or responding to court orders

Confidentiality and when information may be shared

Everything you share in therapy is confidential. Information will only be shared in the following situations:​​​

​

  1. With your consent – for example, if you ask me to contact your GP or another professional.

  2. Supervision – discussed in an anonymised way, as required by the HCPC, to ensure safe and ethical practice.

  3. Legal or safeguarding duties – if there is serious risk of harm to you or someone else, concerns about a child or vulnerable adult, or if a court legally requires disclosure.

​

Where possible, I will always discuss this with you first. I never sell your information or use it for marketing.

How your information is stored

  • Your information is stored securely using encrypted or password-protected systems.
    Only I (and, if relevant, limited IT or admin support bound by confidentiality) have access.
    I take reasonable steps to prevent loss, misuse or unauthorised access.

How long your information is kept

In line with HCPC guidance and legal requirements, clinical records are kept for [insert number e.g. 7] years after your last appointment. They are then securely deleted or destroyed.

 

Enquiry emails or website data may be kept for shorter periods.

Your rights under UK GDPR

You have the right to:

 

Request a copy of your personal information
 

  • Ask me to correct any inaccuracies

  • Ask for your data to be erased (where legally appropriate)

  • Ask me to restrict how your data is used

  • Object to certain types of processing

  • Withdraw consent at any time (if consent was the basis for processing)

​

To use any of these rights, please contact me using the details above.

 

You also have the right to raise a concern with the Information Commissioner’s Office (ICO) if you believe your data has not been handled properly.

Cookies and website use

This website may use cookies to help it function or improve your browsing experience. You can control or disable cookies through your browser settings.

Updates to this policy

This policy may be updated from time to time. The latest version will always appear on this page.

bottom of page