YOUR DATA RIGHTS
Accessibility Note
This policy is available in alternative formats.
If you need this information in a different format, please contact Echo at info@theechosociety.org.uk.
Under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018, you have specific rights regarding your personal information. These rights apply to information held by Echo and, separately, to information held by your Associate Counsellor.
This page explains your rights and how to exercise them.
1. Your Rights Under UK GDPR
You have the following rights:
Right to be informed
You have the right to know how your information is collected, used, stored, and shared. Echo provides this information through our Privacy Notices.
Right of access
You can request a copy of the information held about you. This is sometimes called a “Subject Access Request”.
Right to rectification
If any information we hold is inaccurate or incomplete, you can ask for it to be corrected.
Right to erasure
In certain circumstances, you can request that your information is deleted.
Right to restrict processing
You can ask us to limit how your information is used.
Right to data portability
You can request your information in a structured, commonly used format.
Right to object
You can object to certain types of processing, such as marketing (Echo does not use your data for marketing).
Rights related to automated decision‑making
Echo does not use automated decision‑making or profiling.
2. Who to Contact About Your Data
Because Echo and Associate Counsellors are separate Data Controllers, your rights depend on the type of information you are requesting.
For service‑level information held by Echo
(e.g., enquiries, allocation, attendance, payments, organisational records) Email: info@theechosociety.org.uk
For clinical notes or therapeutic records
These are held by your Associate Counsellor as an independent Data Controller. You should contact your counsellor directly.
If you are unsure who to contact, Echo can guide you.
3. How to Make a Data Request
You can make a request by emailing Echo or your counsellor.
Please include:
• your full name
• the information you are requesting
• any relevant dates or details
• proof of identity (if required)
We will respond within one month, as required by UK GDPR.
4. If You Have Concerns About Your Data
If you are unhappy with how your information has been handled, you can:
Raise a concern with The Echo Society
Email: info@theechosociety.org.uk
Contact the Information Commissioner’s Office (ICO)
The ICO is the UK’s independent regulator for data protection.
Website: ico.org.uk
Helpline: 0303 123 1113
5. Related Policies
This page should be read alongside:
• Counselling & Therapeutic Records Privacy Notice
• Data Retention & Disposal Policy
• Clinical Records, Legal Requests & Professional Boundaries Policy