top of page

PRIVACY NOTICE

​

PRIVACY NOTICE

 

Rousso Consulting takes your privacy seriously and is committed to protecting your personal data in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

This privacy notice explains how personal data is collected, used, stored, and protected across different contexts of engagement with Rousso Consulting.

 

How to use this privacy notice

This privacy notice is divided into sections.

Please read the section or sections relevant to you:

Section 1 – Website visitors and enquiries

Section 2 – Psychotherapy clients

Section 3 – Executive coaching clients

Each section applies only to the context described.

​

Data controller

The joint data controllers for the purposes of this notice are Cynthia Rousso and Alan Rousso.  Cynthia Rousso can be contacted via email at cr@roussoconsulting.com.  Alan Rousso can be contacted via email at ar@roussoconsulting.com

​

SECTION 1

WEBSITE VISITORS & ENQUIRIES

This section applies only to individuals who visit this website or make enquiries via it. It does not apply to psychotherapy or executive coaching services, which are covered in later sections.

Personal data collected via the website

When you visit this website or contact Rousso Consulting through it, the following personal data may be collected:

  • Your name and email address

  • Information you choose to include in an enquiry or message

  • Technical information such as IP address, browser type, pages visited, and dates and times of visits

Only information necessary to operate the website and respond to enquiries is collected.

Website enquiries

If you contact Rousso Consulting via this website, your personal data will be used solely to:

  • Respond to your enquiry

  • Communicate with you in relation to your request

Your information will not be used for marketing purposes without your consent.

Website analytics and cookies

This website may collect limited technical information using analytics or cookies to understand how the site is used and to improve its performance.

Where possible, this information is collected in an anonymised or aggregated form and does not identify individual users. You can control or disable cookies through your browser settings.

Lawful basis for processing (website)

The lawful bases under UK GDPR for processing website data are:

  • Legitimate interests – to operate the website and respond to enquiries

  • Contract – where processing is necessary to take steps at your request prior to entering into a service agreement

Data retention (website)

Personal data collected via the website is retained only for as long as necessary to respond to enquiries and manage appropriate follow-up, after which it is securely deleted.

​

SECTION 2

PSYCHOTHERAPY CLIENTS

This section applies only to anyone receiving psychotherapy services from Cynthia Rousso at Rousso Consulting.

Personal data collected in psychotherapy

In the course of psychotherapy, personal data may include:

  • Name and contact details

  • Session dates and attendance

  • Brief administrative, contractual, or risk-related notes

  • Relevant background information shared during therapy

  • Payment and invoicing records

I keep limited, factual notes to support safe and ethical practice. These are not verbatim records of sessions and do not capture the full content or process of therapy.

Special category data

Psychotherapy involves the processing of special category personal data, including information relating to mental health and emotional wellbeing.

Lawful basis for processing (psychotherapy)

The lawful bases for processing psychotherapy data are:

  • Contract – to provide psychotherapy services

  • Legitimate interests – to manage safe, ethical, and professional practice

The condition for processing special category data is:

  • Provision of health care or treatment

Consent is not the legal basis for processing psychotherapy data.

Use of psychotherapy data

Psychotherapy client data is used to:

  • Provide psychotherapy services

  • Manage appointments and communication

  • Maintain appropriate professional records

  • Meet ethical, legal, and insurance obligations

As part of ethical practice, client material may be discussed anonymously in professional supervision.

Data sharing (psychotherapy)

Psychotherapy data is not routinely shared.

Information may be disclosed where:

  • There is a serious risk of harm to the client or others

  • Safeguarding concerns arise

  • Disclosure is required by law or court order

Only the minimum necessary information will be shared, and where possible this will be discussed with the client in advance.

Data retention (psychotherapy)

Psychotherapy records are retained for:

  • 7 years after therapy ends, or

  • 7 years after a client turns 18, if the client is under 18

After this period, records are securely destroyed.

​

SECTION 3

EXECUTIVE COACHING CLIENTS

This section applies only to individuals receiving executive coaching or consulting services from Alan Rousso at Rousso Consulting.

Personal data collected in coaching

In the course of executive coaching, personal data may include:

  • Name and contact details

  • Session dates and attendance

  • Contractual and administrative information

  • Brief notes to support effective and professional practice

  • Payment and invoicing records

Coaching notes are limited and non-verbatim and do not constitute detailed session records.

Lawful basis for processing (coaching)

The lawful bases for processing coaching data are:

  • Contract – to provide coaching services

  • Legitimate interests – to manage professional practice and business operations

Confidentiality in coaching

Confidentiality is a fundamental part of the coaching relationship.

Information shared within coaching sessions will not be disclosed without the coachee’s knowledge or agreement, except where:

  • Disclosure is required by law or court order

  • There is a serious concern about risk of harm

  • Safeguarding obligations apply

Where coaching is sponsored or commissioned by an organisation, the boundaries and limits of confidentiality (for example, regarding progress updates) will be agreed in advance.

Data retention (coaching)

Coaching records are retained for an appropriate period in line with professional, legal, and insurance requirements, after which they are securely deleted or destroyed.

​

DATA SECURITY (ALL CONTEXTS)

Across all contexts, appropriate technical and organisational measures are in place to protect personal data against unauthorised access, loss, misuse, or disclosure.

Personal data may be stored securely in paper and/or digital form, with access limited to what is necessary for legitimate purposes.

​

YOUR DATA PROTECTION RIGHTS

Under UK GDPR, you have the right to:

  • Request access to the personal data held about you

  • Request correction of inaccurate or incomplete data

  • Request erasure of personal data where legally applicable

  • Request restriction of processing

  • Request data portability

  • Object to processing in certain circumstances

Requests can be made by contacting Cynthia Rousso at cr@roussoconsulting.com

or Alan Rousso at ar@roussoconsulting.com

​

COMPLAINTS

If you have concerns about how your personal data is handled, please feel free to raise these with Cynthia Rousso or Alan Rousso directly.

You also have the right to complain to the Information Commissioner’s Office (ICO), the UK data protection regulator.

Website: www.ico.org.uk

 

CHANGES TO THIS NOTICE

This privacy notice is kept under regular review. Any changes will be published on this website and will take effect from the date of publication.

bottom of page