Privacy policy

Privacy Statement and Cookies


My website is pretty straightforward and the only place data from you will be collected is through the contact form – which is SSL protected so fully encrypted, as is the rest of my website.

If you do decide to come to therapy with me, then I will also hold your personal data in the form of a contact details form attached to my contract. For young people under 18 I also hold a referral form.

This policy, therefore sets out the basis on which any personal data I collect from you, or that you provide to me, will be processed by me.

Please read the following carefully to understand my views and practices regarding your personal data and how I will treat it. By visiting you are accepting and consenting to the practices described in this policy.

For the purpose of the Data Protection Act 1998 (the Act) (soon to be General Data Protection Regulation (GDPR) (Regulation (EU) 2016/679)), the data controller is Nikki Simpson (address available on request).

Secure Storage

Your details will be stored and kept securely and confidentially in a safe filing system. Your contact information form will be deleted once our therapeutic relationship has ended. Printed off referral forms (in the case of young people) will be shredded and discarded.

Information I may collect from you

I may collect and process the following data about you:

  • Information provided by you.
    • You may provide information about yourself by filling in forms on this website or by corresponding with me by phone or email, and other.
    • This includes information you provide when you subscribe to my blog, comment on a blog post or send a message through my contact form, and when you report a problem with my site.
    • The information you provide may include but not limited to your name, address, e-mail address and phone number.
  • Information I collect about you.
    • NOTE: My website is hosted by WordPress, and they have informed me that my website won’t collect any other data from you but the data found on my contact form. Nevertheless, in their privacy policy, they state that this is the type of information they might collect. 
      • technical information, including the Internet protocol (IP) address used to connect your computer to the Internet, your login information, browser type and version, time zone setting, browser plug-in types and versions, operating system and platform;
      • information about your visit, including the full Uniform Resource Locators (URL) clickstream to, through and from our site (including date and time); products you viewed or searched for; page response times, download errors, length of visits to certain pages, page interaction information (such as scrolling, clicks, and mouse-overs), and methods used to browse away from the page and any phone number used to call our customer service number.
      • Information we receive from other sources. 
        • We may receive information about you if you use any of the other websites we operate or the other services we provide. We are also working closely with third parties (including, for example, business partners, sub-contractors in technical, payment and delivery services, advertising networks, analytics providers, search information providers, credit reference agencies) and may receive information about you from them.

Uses made of the information

I use information held about you in the following ways:

  • Information you provide, and information I collect about you.
    • I will use this information to carry out my professional and contractual obligations during out therapeutic or supervisory relationship. This includes:
      • Contracting and ensuring the terms found in the contract are upheld by both parties.
      • In case of emergencies or where disclosure might be necessary – I will contact your GP or next of kin in these cases, with your knowledge and consent UNLESS it is a case of terrorism or money laundering, which by law I must report without the need for consent.
  • Information I receive from other sources.
    • This might only be the case when referred by third parties. The data will be handled safely as above.

Disclosure of your information

I will not share your personal information with anyone else, unless there is a duty to disclose in order to comply with any legal obligation (terrorism alerts, money laundering).

The only other person involved in your case – only your first name will be known to them, or if you choose to be anonymised further, initials or aliases can be used – will be my Supervisor, who is held by the same privacy, data protection and confidentiality clauses as described here and in my contract.

Where I store your personal data

The data collected will be kept in a secure filing cabinet. Signed agreeements are kept in a password protected electronic system.

Access to information

The current Act gives you the right to access information held about you. Your right of access can be exercised in accordance with the Act.

Your rights

You have the right to opt-out of receiving marketing emails or surveys from me. I have added this clause in my contract. You can also let me know whether you want to change how I use your data.

Right to Access

You have the right to ask for a copy of your personal information, free of charge, in an electronic or paper format. You also have the right to ask me to amend or change any incorrect information about you.

Right to be forgotten

You have the right to ask me to delete any information that I hold about you, including personal information that is no longer relevant to original purposes – for example when our therapeutic relationship has ended or if you wish to withdraw consent. In all cases and when considering such requests, these rights are obligatory unless it’s information that I have a legal obligation to retain.

Data Portability

You have the right to receive your personal information as previously provided, and to transfer this information to another party.

***If you follow a link from my websites to any other websites, do have a look at their own privacy policies,

for your information and security.***


I don’t hold any data in regards to cookies, but WordPress (host for might still collect them without my direct knowledge. As mentioned above, the representative I have spoken to at WordPress has assured me that my website doesn’t collect any data apart from the encrypted contact form. (host for www.) might hold information on commenters on my blog. These can be found by reading this link.

In any case, cookie data I hold will expire within a year.

I have included below a summary of information on Cookies found at (host for These are cookies that might be held for the general use of the website. Read more on this link.

Strictly Necessary – These are the cookies that are essential for websites on to perform their basic functions. 

Functionality – These cookies are used to store preferences set by users such as account name, language, and location. They are not used to track visitors on sites that are not hosted on

Performance – Performance cookies collect information on how users interact with websites hosted on, including what pages are visited most, as well as other analytical data. These details are only used to improve how a website functions.

Advertising/Tracking- These cookies are used to display relevant advertising to visitors on sites, as well as to track the volume of visitors to the network. They track details about visitors such as the number of unique visitors, number of times particular ads have been displayed, the number of clicks the ads have received, and are also used to measure the effectiveness of ad campaigns by building up user profiles. These are set by Automatic and trusted third party networks, and are generally persistent in nature.

Third Party/Embedded Content – Sites hosted on make use of different third party applications and services to enhance the experience of website visitors. These include social media platforms such as Facebook and Twitter (through the use of sharing buttons), or embedded content from Youtube and Vimeo. As a result, cookies may be set by these third parties, and used by them to track your online activity. We have no direct control over the information that is collected by these cookies.

Controlling cookies -Visitors may wish to restrict the use of cookies, or completely prevent them from being set. Most browsers provide for ways to control cookie behaviour such as the length of time they are stored – either through built-in functionality or by utilizing third party plugins.

To find out more on how to manage and delete cookies, visit For more details on advertising cookies, and how to manage them, visit (EU based), or (US based).

It’s important to note that restricting or disabling the use of cookies can limit the functionality of sites, or prevent them from working correctly at all.

Web beacons and other tracking technologies

Both websites and HTML e-mails may also contain other tracking technologies such as ‘web beacons’. These are typically small transparent images that provide us with statistics, for similar purposes as cookies. They are often used in conjunction with cookies, though they are not stored on your computer in the same way. As a result, if you disable cookies, the web beacons may still load, but their functionality will be restricted.