Privacy Notice – Supervision

Important information

In my role as your supervisor, I will hold personal information about you. This privacy notice explains how I look after your personal information. It informs you about your privacy rights and how the law protects you.

It is important that you read this privacy notice so that you are fully aware of how and why I am holding and using your personal information.


Personal information that I obtain

Personal information means any information about an individual from which that personal can be identified. I may obtain, use, store and transfer different kinds of personal information about you.

  • Identity and contact information includes your name, marital status, title, date of birth, gender, address, email address, telephone numbers, next of kin and professional executor.
  • Professional information includes qualification, registration with relevant regulatory bodies, details of other supervisors / tutors, indemnity insurance certificate, DBS checks, professional membership, ICO registration certificate and your professional on-line profile / website.
  • Supervision information includes information provided to me or generated by me in for the purposes of your supervision.

In the course of your supervision, I may also obtain special category data about you. Special category data includes personal data which reveals racial or ethnic origin, religious or philosophical beliefs, trade union membership, data concerning health and data concerning a person’s sex life or sexual orientation.

It is important that the personal information which I hold about you is up to date and accurate. Please inform me of any changes to your personal information during the course of our relationship.


How I obtain personal information

I may obtain personal information about you from a number of sources:

  • From you.
  • From other supervisors.
  • From your university or other relevant training organisation and professional regulatory body.

How I use your personal information

I use your personal information for the following purposes:

  • For the purposes of both your supervision and meeting my own professional obligations to be supervised with respect to my role as your supervisor.
  • For the purpose of meeting my professional, regulatory and legal obligations, including with respect to professional supervision.
  • For the purposes of regulatory or legal proceedings.
  • Where I believe you or others are at risk of harm, for the purposes of safeguarding you or others against such harm.

The basis upon which I use personal information

I will only use and hold your personal information (including special category information) where there is a lawful basis for me to do so. The relevant lawful bases are:

  • Where it is necessary for my legitimate interests in as a professional therapist / counsellor in providing supervision to you and meeting my own professional obligations to be supervised with respect to my role as your supervisor, which do not override your interests and fundamental rights.
  • Where it is necessary to comply with a legal obligation.

When I use and hold your special category information, it will be where it is necessary:

  • For the purposes of the provision of healthcare and treatment and in light of my professional obligations of confidentiality.
  • For the purposes of safeguarding an individual from harm. 
  • To establish, exercise or defend legal claims.

I do not rely upon your consent in using or holding your personal information or special category information in the usual course of supervision.

How long I keep personal information

Generally, I will hold your personal information for a period of seven years after the conclusion of our supervisory relationship, unless it is necessary to retain your personal information for longer, for example, because:

  • There may be professional or ethical matters which I am obliged to report to your training organisation or professional regulatory body.
  • There is an ongoing possibility of regulatory or legal proceedings.
  • I am subject to an ongoing legal obligation.

Who I share personal information with

I will only share your personal information, where it is necessary for the purposes above, with the following:

  • My supervisor for the purposes of my own professional obligations to be supervised with respect to my professional role as your supervisor.
  • The relevant professional regulator where it is necessary to report potential breaches of ethical principles or codes of professional conduct.
  • Relevant bodies or organisations where I am legally obliged to do so.

International transfer of personal information

I do not transfer your personal information outside of the European Economic Area.

How I protect personal information

I have put in place appropriate security measures to prevent your personal information from being accidentally lost, used or accessed in an unauthorised way, altered or disclosed. I have put in place procedures to deal with any suspected personal data breach and will notify you and any applicable regulator of a breach where I am required to do so.

I will only share your personal information where it is necessary for the purposes above and I am satisfied that the individual or organisation complies with its obligations to keep your personal information secure. In addition, my supervisor is subject to professional obligations of confidentiality.

The legal rights of individuals whose personal information I process

You have the following rights:

  • Request access to your personal information (commonly known as a “data subject access request”). You can request a copy of your personal information that I hold and check that I am lawfully processing it.
  • Request correction of the personal information that I hold about you. This enables you to request for any incomplete or inaccurate data I hold about you corrected.
  • Request erasure of your personal information. You can ask me to delete or remove personal information where there is no good reason for me continuing to process it. You also have the right to ask me to delete or remove your personal data where you have successfully exercised your right to object to processing (see below), where I may have processed your information unlawfully or where I am required to erase your personal data to comply with local law.
  • Object to processing of personal information where I am relying on my legitimate interests (or those of a third party) and there is something about your particular situation which makes you want to object to processing on this ground as you feels it impacts on your fundamental rights and freedoms.
  • Request restriction of processing of your personal information. You can ask me to suspend the processing of your personal information in the following scenarios: (a) if you want me to establish the information’s accuracy; (b) where my use of the data is unlawful but you do not want me to erase it; (c) where you need me to hold the data even if I no longer require it as you need it to establish, exercise or defend legal claims; or (d) you have objected to my use of your information but I need to verify whether I have overriding legitimate interest to use it

These rights are subject to various legal exceptions. If you make any of the requests above, I would explain to you in my response if I have relied upon any of these exceptions.

You have the right to make a complaint at any time to the Information Commissioner’s Office (ICO). Full details can be found on the ICO’s website However, if you have any concerns, I would be grateful for a chance to deal with these before you approach the ICO.

Changes to this privacy notice

I keep this privacy notice under regular review. This privacy notice was last updated on 25 May 2018.

Who owns this business website

My name is Vesna Mandic-Bozic. I am a UKCP registered Therapeutic Counsellor with Registration number: 08159693.


What personal data is collected by this website:

  • Contact forms: If you fill in a form on my website, that data will be stored on the web host before being sent to me.
  • Cookies: If you interact with my website by inputting information (e.g. use the contact form) then you may opt in to saving your name, e-mail address and website in cookies. These are for your convenience so that you do not have to fill in your details again when you leave another comment message.
  • Embedded content from other websites: Articles on this site may include embedded content (e.g. videos, images, articles, etc.). Embedded content from other websites behaves in the exact same way as if the visitor has visited the other website. These websites may collect data about you, use cookies, embed additional third-party tracking, and monitor your interaction with that embedded content, including tracking your interaction with the embedded content if you have an account and are logged in to that website.
  • Analytics: I reserve the option to use the third party service ‘Google Analytics’ to collect standard internet log information and details of visitor behaviour patterns. The objective is to find out things such as the number of visitors to the various parts of the site. This information is only processed in a way that does not identify anyone. I do not make, and do not allow Google Analytics to make, any attempt to find out the identities of those visiting my website. You can read Google Analytics privacy notice here:
  • Content management system: This website has been built using the WordPress content management system.  You can find out about WordPress and their data protection policy on their website: