Last Updated : 06/06/2026

I have implemented strict security strategies to safeguard my clients' personal information and protect the therapeutic process. My practice fully complies with UK data protection laws through the following measures:
ICO Registration. I am registered as a Data Controller with the Information Commissioner’s Office 
(ICO), which regulates data protection in the UK. My registration details and 
certificate can be provided immediately upon request.

 

Secure Physical Storage
Any physical paperwork, intake forms, or handwritten notes are kept locked away in a secure space. I am the only individual with access to this location, ensuring total physical confidentiality.

Specialized Digital Storage (Fortuna)
All digital data, clinical notes, and client records are inputted into Fortuna, a specialized, secure, and GDPR-compliant data management platform designed specifically for play therapists. Access to this digital database is strictly restricted to myself via secure authentication.

Anonymisation and Encryption
To protect the identity of the children in my care:
• Coding System: All clinical files and session notes are coded for anonymity. A child's identity is kept separate from their therapeutic notes.
• PTUK Audits/Access: In the event that the Play Therapy UK (PTUK) head office requires access to my records for professional accountability, quality assurance, or audit purposes, all client information will remain strictly encrypted and anonymized to preserve absolute confidentiality.