Psychotherapy & coaching & psychology

Live better

Our dialogue can help you find your inner YES to life so that possibilities seem less overwhelming & more delightful, making personal freedom tangible even in hard times.Sessions are galvanising, tenderly inquisitive, richly imaginative places to practice your spontaneity and freshest, most honest thinking. Over time, attitudes shift and new faculties develop. Hurting eases. Wounds can heal.To take life decisions wisely and with my accompaniment, I will support you, reflect your strengths and challenge you in the gentlest ways to stretch into your larger, better self.As an existential analyst, I integrate processes and methods from across coaching psychology and humanistic therapy to sustain valuable, life-changing dialogues.

Privacy Notice 2026 (hyperlinks to be added)

Overview
I collect personal data to assist in the administration of Throughline Ltd to provide you with an effective service and comply with the company law of England & Wales. I established Throughline Ltd in 2007, its company registration number is 06334681, and I am its sole director and shareholder. Throughline Ltd is registered with the Information Commissioner’s Office, Registration ZA530336.My contact is kate [at] throughline dot co dot uk. It is written this way to help limit bots spamming me.Lawful basis
The lawful basis for collecting personal information is consent. All of your data protection rights may apply, except the right to object. To be clear, you do have the right to withdraw your consent at any time.
The lawful basis for vital interests collecting or using the information is needed when someone’s physical or mental health or wellbeing is at urgent or serious risk. Vital interest operates if you are in physical danger and you contact me to release your name and location to medical or police services to reach you; or your condition deteriorates such that your GP (as the gateway to crisis services) needs to become involved in your care.Where I get the personal information
Directly from you.How long I keep information
This is explained in the detailed description of therapy records below.Safe processing of personal data
Throughline Ltd is the data processor and data controller. Here are the sub-processors Throughline uses:
• FreeAgent - accounts, timesheets
• HSBC, Monzo – payments by BACS or IBAN
• O2 - SMS, telephone
• Proton - mail, calendar, storage drive
• Stripe - credit card payments
• TherapistPA - room bookings at City of London Therapy Centre
• WriteUpp - practice management software
• Zoom - videoconferencing
• Also, for some clients: Otter.ai (session transcription), WeTransfer (file transfer for online session recording), Telegram, WhatsApp Business.
If you are referred by third parties including City of London Therapy Centre or HQ Therapy Rooms, the referring clinic may hold your name, email, and phone number as provided by you.
These data processors enable the administrative activities of the therapy practice to run smoothly and professionally.Identifying information
For invoicing, your name and email address will be held in my FreeAgent software (policy here). Payments against invoices will be associated with the issuing bank and bank account holder and this data held in perpetuity. If you make payment by credit card, Stripe will process that payment (policy here - see 1.2 End Customer).I would like to use your contact details to assist with the administration of your appointments (including any changes and reminders) and to invoice you for my services.I would also like to associate your client record with therapy session notes. If you prefer to have them dissociated, you and I can agree a pseudonym that I’ll use for a second client record linked only to session notes. This entails ongoing administration time which may be chargeable over and above the session fee.Therapy recordsI maintain records in accordance with the General Psychotherapy Council's Principle #18 concerning Notes, Principle #4 concerning Communication. Specifically:1. For audit purposes, as a GPsyC practitioner I will keep an administrative record, i.e. diary/calendar entries, of sessions I have with clients for a period of three years after the conclusion of any therapy work. This information will be held in my Proton Calendar. Proton is encrypted and protected by Swiss privacy laws.2. A GPsyC practitioner may produce and hold therapy/process notes to aid their work with their clients; these are not medical records, and every effort will be made to ensure the material is anonymised where possible. I will store client notes/records securely and confidentially, ensuring any data held digitally (i.e computer/phone/external hard drive) will conform with Information Commissioner’s Office (ICO) and General Data Protection Regulation (GDPR) guidelines. Therapy notes will be held in WriteUpp Practice Management Software vouchsafed with 2-Factor Authentication.3. If in the course of selecting me as a therapist or having therapy with me, you share information about your racial or ethnic origin; political opinions; religious or philosophical beliefs; trade union membership; your health, sex life or sexual orientation, I may note it in a session note if it is relevant to the theme(s) you bring to therapy. ICO considers these “special category data” and it is held with the same protectiveness as anything else a client shares in therapy. This information may be used by us as an alliance to make sense of your situation, the questions life is asking you, and your position in matters of importance to you. It is not used for any other purpose.4. Following GPsyC guidance, therapy notes will be minimal in nature, made as anonymous as is reasonably possible, and discarded at twelve months post the conclusion of a psychotherapy relationship. Your details will be destroyed in WriteUpp Practice Management after this period.5. Therapy notes would only be held longer than twelve months should I, the practitioner, have reason to deem it necessary.6. WriteUpp Practice Management Software supports the purging of client records based on the date of the most recent activity.GPsyC Principle #8 on Confidentiality makes plain that it is an essential component of psychotherapeutic practice.
Client confidentiality may be broken only where there's a severe threat to the patient or others or a legal mandate to disclose. Should imminent or likely risk of harm to self or others arise, I will always encourage a client to self-report where they have the capacity.
Moreover, if I deem it necessary to breach confidentiality, I can expect to explain my rationale for so doing to my professional body. Where circumstances allow, I would consult with a clinical supervisor before taking such a step.GPsyC Principle #25 describes Supervision. I seek supervision regularly and all client information is anonymised, with no unnecessary identifying details.
A client's express consent is required under GPsyC Principle #9, Consent, if I am writing up and presenting client case studies.
I use these principles because they are clear, concrete and specific. The other professional bodies of which I am a member do not provide the same clarity.Protecting your rights
I take your privacy seriously and will take all reasonable steps to ensure the protection if your data. Please note that your right to be forgotten can be exercised after the mandatory periods. You can request a copy of any data held about you by submitting an Access Request.General information about lawful bases and data protection rights
Under UK data protection law, every business must have a “lawful basis” for collecting and using your personal information. There is a list of possible lawful bases in the UK GDPR. You can find out more about lawful bases on the ICO’s website.Which lawful basis a business relies on may affect your data protection rights which are set out in brief below. You can find out more about your data protection rights and the exemptions which may apply on the ICO’s website:
• Your right of access - You have the right to ask us for copies of your personal information. You can request other information such as details about where we get personal information from and who we share personal information with. There are some exemptions which means you may not receive all the information you ask for. Read more about the right of access.
• Your right to rectification - You have the right to ask us to correct or delete personal information you think is inaccurate or incomplete. Read more about the right to rectification.
• Your right to erasure - You have the right to ask us to delete your personal information. Read more about the right to erasure.
• Your right to restriction of processing - You have the right to ask us to limit how we can use your personal information. Read more about the right to restriction of processing.
• Your right to object to processing - You have the right to object to the processing of your personal data. Read more about the right to object to processing.
• Your right to data portability - You have the right to ask that we transfer the personal information you gave us to another organisation, or to you. Read more about the right to data portability.
• Your right to withdraw consent – When we use consent as our lawful basis you have the right to withdraw your consent at any time. Read more about the right to withdraw consent.
If you make a request, I must respond to you without undue delay and in any event within one month.
To make a data protection rights request, please contact me using the contact details at the top of this privacy notice.How to complainIf you have any concerns about Throughline’s use of your personal information, you can make a data protection complaint to me:Email: kate [at] throughline dot co dot ukIf you remain unhappy with how I’ve used your data after raising a complaint with me, you can also complain to the ICO.The ICO’s address:
Information Commissioner’s Office
Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AFHelpline number: 0303 123 1113
Website: https://www.ico.org.uk/make-a-complaint