pourabdollah.com Privacy Policy
I, Mrs. Pour Abdollah Tootkabony, Borderless Minds Ltd, am committed to protecting the personal data that you provide to me and recognise the importance of being clear about how I intend to use it. All personal data provided by you through email or during the therapy sessions will be held by me. This privacy policy relates specifically to personal data that you provide to me by my email address: counselling at pourabdollah.com. I do not accept any liability or responsibility in terms of the privacy and security practices of the third party websites introduced in pourabdollah.com (i.e. youtube.com).
Information I may collect from you
When you contact me, I may ask you for personal data and other information to allow me to provide you with the therapy sessions that you require. This could include the following:
- Full name
- Email address
- Telephone number
- Name & Address of your GP
- Next of Kin
The internet is not completely secure. I cannot guarantee the security of your personal data transmitted by email. Any transmission is at your own risk. Some of the information you provide to me may be considered sensitive personal data as defined under the Data Protection Act 1998. This means information about your personal details, physical or mental health and sexual life. I use all possible security tools to keep your data safe and to prevent any access to them by keeping my Antivirus up to date, using very strong password and changing it regularly, Sign Out after any login, not accessing my email from public computers and other security measures. Because a copy of your email also kept in your mail box (in your Sent Mail), I do advice that you do the same and keep your email secure. It is also your responsibility to keep our conversations secure at your end.
How do I intend to use your personal data?
To provide a service: I may contact you for reasons relating to the therapy sessions. I would use your contact details to manage this and may retain them for future references. I may also contact your next of kin or your GP in case of emergency.
Will my personal data be shared with other organisations?
Your personal data provided by you via email will only be used by me. However, in exceptional circumstances such as protecting human safety, if the law requires it; I may pass your personal data to Public Authorities or your GP. I will not otherwise disclose your personal data to anyone.
Confidentiality exceptions
Everything you share with me in therapy is confidential. However, there are rare circumstances where I may need to share information without your consent:
- Risk of serious harm: If I believe you or someone else is at serious risk of harm, I may need to share information with appropriate authorities to help keep people safe.
- Safeguarding concerns: If I become aware of concerns about a child or vulnerable adult being at risk of abuse or neglect, I have a legal and ethical duty to report this to the appropriate safeguarding authorities.
- Court order: If a court orders me to disclose information, I am legally required to comply.
- Legal requirement: In very rare circumstances, the law may require me to share information (for example, under terrorism legislation).
My commitment to you: I will always try to discuss any disclosure with you first, unless doing so would itself put someone at risk. Breaking confidentiality is always a last resort, and I would share only the minimum information necessary.
Third-party digital services:
I use the following third-party services which may process some of your data:
- Google Analytics — Website analytics
- Google Mail — Email
- Zanda — Practice management software
- Xero — Accounting Software
- Bluehost — Website hosting
- Zoom — Video sessions
- Microsoft Teams — Video sessions
- GoodNotes — Note Taking Software
Each of these services is bound by a data processing agreement. Links to their privacy policies are available on request.
I never sell your personal data to anyone, under any circumstances.
How long will you retain my personal data?
I keep your therapy records for 7 years after our last session. This retention period is in line with the Limitation Act 1980 and standard professional indemnity insurance requirements.
Clinical notes are stored electronically using a secure, password-protected note-taking software. To minimise the amount of personal data held, my clinical notes identify clients by their initials rather than their full names wherever possible.
Records are accessible only to me via encrypted, password-protected devices. Clinical notes are stored within a password-protected application, providing an additional layer of security. Appropriate technical and organisational measures are in place to protect personal information from unauthorised access, loss, misuse or disclosure.
Where records are synchronised or backed up electronically, they are protected by the security measures provided by the relevant service providers.
At the end of the retention period, records are permanently and securely deleted.
Your rights under UK GDPR
You have the following rights regarding your personal data:
Right to be informed You have the right to know how I collect and use your personal data. This privacy policy fulfils that right.
Right of access You can request a copy of the personal data I hold about you. This is commonly called a “subject access request.” Under the Data (Use and Access) Act 2025, I will conduct a reasonable and proportionate search when responding to your request.
Right to rectification If any personal data I hold about you is inaccurate or incomplete, you have the right to ask me to correct it.
Right to erasure In certain circumstances, you can ask me to delete your personal data. However, this right does not apply where I am required to keep records for professional or legal reasons (such as insurance requirements or the Limitation Act 1980).
Right to restrict processing You can ask me to limit how I use your data in certain circumstances — for example, if you dispute its accuracy.
Right to data portability Where technically feasible, you can ask me to transfer your data to another service provider in a commonly used format.
Right to object You have the right to object to certain types of processing, including processing based on legitimate interests.
Rights related to automated decision-making You have the right not to be subject to decisions based solely on automated processing. I do not use automated decision-making in my practice.
To exercise any of these rights, please contact me at: counselling [at] pourabdollah.com
I will respond to your request within one month. There is no fee for most requests, but I may charge a reasonable fee if your request is clearly unfounded or excessive.
Make a data protection complaint
If you believe Shahrzad pour Abdollah Tootkabony has not handled your personal data in accordance with UK data protection law, you can submit a formal complaint using this link.
You will receive an automatic acknowledgement email. Your complaint will be investigated and you will receive a response. If you are not satisfied, you have the right to escalate to the Information Commissioner’s Office (ICO).
Please click here read more about complaint
Cookies
We use cookies to ensure that we give you the best experience on pourabdollah.com. This is mainly for statistic purposes by using “Google Analytics” for counting our visitors and keeping the track of them without storing any personal information about them. If you continue without changing your settings, we’ll assume that you are happy to receive all cookies on pourabdollah.com. However you can always change your cookie settings at any time by going to your setting and change or delete all cookies from your browser. To know how you can change your settings or delete cookies go to www.aboutcookies.org.
