Privacy Policy
Last updated: May 2026
1. Who We Are
BNG Psychotherapy is a private psychotherapy practice operated by Ben Ng, a sole practitioner based at 32 Norfolk Street, King’s Lynn, PE30 1AH.
Website: https://bngpsychotherapy.com Email: ben@bngpsychotherapy.com Phone: 07749 102533
Ben Ng is registered with the Information Commissioner’s Office (ICO) as a data controller. This means he is responsible for deciding how your personal data is collected, stored, and used.
2. What This Policy Covers
This policy explains what personal information BNG Psychotherapy collects, why it is collected, how it is used, and your rights under UK data protection law — specifically the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
Please read this policy carefully. If you have any questions, contact ben@bngpsychotherapy.com.
3. The Data We Collect
Depending on how you interact with this website and our services, we may collect the following types of information:
Contact and enquiry data Name, email address, phone number, and any information you include in a contact form or email enquiry.
Booking data Name, contact details, and scheduling preferences submitted when booking a consultation or session.
Session and clinical data Information you share during therapy sessions, including personal history, mental and emotional health, relationship circumstances, and other sensitive disclosures. This is classified as special category data under UK GDPR (Article 9) and is treated with the highest level of care and confidentiality.
Insurance and payment data If you are using private health insurance (for example via BUPA, Aviva, AXA, Vitality, or WPA), we may collect your insurance membership number and relevant authorisation details. Payment amounts and dates may be recorded, but full payment card details are never stored by us.
Website usage data Anonymous or pseudonymous data about how you use this website, collected via cookies and similar technologies. See Section 9 for more detail.
4. How We Collect Your Data
We collect data in the following ways:
5. Why We Use Your Data and Our Legal Basis
Under UK GDPR, we must have a lawful basis for processing your personal data. We rely on the following:
Contractual necessity — to provide therapy services you have requested, process bookings, and communicate with you about your appointments.
Legitimate interests — to respond to enquiries, manage our practice, and keep appropriate clinical records. We have assessed that these interests do not override your rights.
Legal obligation — where we are required by law to retain or disclose information (for example, in safeguarding situations).
Vital interests — in rare circumstances where there is a risk to life, we may need to share information to protect your safety or the safety of others.
For special category data (your mental and emotional health information), we rely on:
Article 9(2)(h) UK GDPR — processing necessary for the provision of health or social care treatment by a health professional.
We do not process your data for marketing purposes without your explicit consent, and we will never sell your data to third parties.
6. How We Store and Protect Your Data
Clinical notes and client records are stored securely, in line with the ethical guidelines of the British Association for Counselling and Psychotherapy (BACP).
Electronic records are password protected and stored on encrypted devices or secure platforms. Paper records, if any, are kept in a locked location.
Session communications take place via Zoom, a platform that uses end-to-end encryption. You will receive a secure link when you book a session.
We retain clinical records for a minimum of 7 years after the end of therapy (or, in the case of clients who were minors at the time of treatment, until their 25th birthday), in line with standard professional guidance. After this period, records are securely destroyed.
7. Confidentiality and When We May Share Your Data
Everything discussed in therapy is confidential. We do not share your information with anyone without your consent, except in the following limited circumstances:
Safeguarding — if we have reasonable concern that you or another person (including a child or dependent adult) is at risk of serious harm, we may be required to share information with relevant authorities. Where it is safe to do so, we will discuss this with you first.
Legal obligation — if ordered to disclose information by a court or other legal authority.
Clinical supervision — your therapist engages in regular clinical supervision as required by professional standards. Supervisors are bound by the same duty of confidentiality. Information shared in supervision is anonymised wherever possible.
Insurance providers — if you are using private health insurance, we may be required to share limited clinical information (such as diagnosis codes or session dates) with your insurer to process claims. This will be discussed with you in advance.
Your request — if you ask us to share information with your GP or another professional, we will do so using a release of information form.
8. Third-Party Services
We use the following third-party services in our practice. Each has its own privacy policy, which we encourage you to review:
Zoom — used for online therapy sessions. Zoom uses encryption and is configured to meet privacy standards appropriate for sensitive conversations. Zoom Privacy Policy: https://zoom.us/privacy
Psychology Today — we maintain a professional listing on this platform. Any data you submit directly to Psychology Today is subject to their privacy policy.
Private health insurers — BUPA, Aviva, AXA, Vitality, and WPA. Data shared with insurers is limited to what is necessary to process your claim.
We do not currently use email marketing platforms, advertising networks, or third-party analytics tools that track you across other websites.
9. Cookies
Our website uses cookies to help it function and to understand how visitors use it. A cookie is a small text file stored on your device.
We use a cookie consent tool on this site, which means non-essential cookies are only placed with your permission.
Functional cookies — essential for the website to work correctly. These cannot be turned off.
Preference cookies — remember settings you have chosen.
Statistical cookies — used to understand how visitors interact with the site, on an anonymous basis.
Marketing cookies — we do not currently use marketing or advertising cookies.
You can manage or withdraw your cookie consent at any time via the cookie settings on this website. You can also control cookies through your browser settings, though this may affect how the site functions.
For more detail, please see our Cookie Policy: https://bngpsychotherapy.com/cookie-policy
10. Your Rights Under UK GDPR
You have the following rights in relation to your personal data:
Right of access — you can request a copy of the personal data we hold about you (a Subject Access Request).
Right to rectification — you can ask us to correct any inaccurate or incomplete data.
Right to erasure — in certain circumstances, you can ask us to delete your data. Note that we may need to retain clinical records for the minimum retention period described above.
Right to restrict processing — you can ask us to limit how we use your data in certain situations.
Right to data portability — you can request your data in a structured, machine-readable format where technically feasible.
Right to object — you can object to us processing your data where we rely on legitimate interests as our legal basis.
Rights related to automated decision-making — we do not make any automated decisions about you.
To exercise any of these rights, please contact ben@bngpsychotherapy.com. We will respond within one month.
11. Complaints
If you have concerns about how we handle your data, please contact us in the first instance so we can try to resolve the matter.
If you remain unhappy, you have the right to lodge a complaint with the Information Commissioner’s Office (ICO):
Website: https://ico.org.uk Phone: 0303 123 1113 Post: Information Commissioner’s Office, Wycliffe House, Water Lane, Wilmslow, SK9 5AF
12. Changes to This Policy
We may update this privacy policy from time to time. The date at the top of this page will always reflect when it was last revised. We encourage you to review this page periodically.
13. Contact Us
If you have any questions about this privacy policy or how your data is handled, please get in touch:
Ben Ng BNG Psychotherapy 32 Norfolk Street, King’s Lynn, PE30 1AH ben@bngpsychotherapy.com 07749 102533
BNG Psychotherapy
(inside Adorn Tattoo)
32 Norfolk Street, King’s Lynn, PE30 1AH
Norfolk, UK // Accepting clients worldwide
