The GDPR (‘General Data Protection Regulation’) states that I must have a lawful basis for holding and using your personal data. Different lawful bases will be relevant at different times:

If you are currently having therapy or if you are in contact with me to consider therapy, I will hold and use your personal data, where necessary, for performance of our contract.

If you have had therapy with me and it has now ended, I will use legitimate interest as my lawful basis for holding and using your personal information.