Privacy

Privacy notice

This notice explains what personal information I collect, why, and how I keep it safe. Last updated: October 2026.

Who I am

I'm Don McJimpsey, trading as Wondering Spaces Art Psychotherapy. I'm the data controller for the information described here, which means I'm responsible for looking after it. I'm registered with the Information Commissioner's Office (ICO), registration number ZC272209.

This website

This website doesn't use cookies, contact forms, analytics or tracking, and it doesn't load anything from third-party services. The site is hosted by GitHub, which may briefly keep technical information such as IP addresses to keep its service secure.

If you contact me

If you email me, I'll use your name, contact details and anything you choose to tell me only to reply to you and arrange a first conversation. Please don't include detailed health information in a first message. If you don't go on to work with me, I'll delete your enquiry within 12 months.

If you take part in therapy

If you join a group or individual sessions, I'll keep the information needed to provide safe therapy. This includes contact details, an emergency contact, relevant health information, safety plans and brief clinical notes, as required by HCPC standards. Photographs of artwork are kept without your name or personal details beside them.

Health information is special category data under UK GDPR. I process it to provide health care, under a professional duty of confidentiality.

Your information is stored securely. Only I can see it, apart from what a group co-facilitator needs to know to keep the group safe. Otherwise, I share it only:

• with your consent, for example with your GP
• in clinical supervision, without identifying you
• where I'm required to by law, or where there's a serious risk to your safety or someone else's

Clinical records are kept for the period recommended by my professional body, then securely destroyed. You'll receive full details in writing before sessions begin. If I'm working as part of a group run by an organisation, that organisation's own privacy notice will also apply.

Your rights

You have the right to ask for a copy of the information I hold about you, to ask me to correct it, and in some circumstances to ask me to delete or restrict it. To make a request, please contact me.

If you're unhappy with how I've handled your information, please tell me first so I can try to put it right. You also have the right to complain to the Information Commissioner's Office at ico.org.uk or on 0303 123 1113.