Privacy Policy

Inner Warrior Therapy, a trading name of Porth Morvah Ltd

Last updated: 19 August 2026

Who we are

Inner Warrior Therapy is a trading name of Porth Morvah Ltd. In this policy, "I," "me," and "my practice" refer to Carl Stephens, the psychotherapist who provides services through Inner Warrior Therapy, and who is the data controller for the personal information described below.

Contact: carl@innerwarriortherapy.co.uk

ICO registration reference: ZB696024

This policy explains what personal information I collect when you contact me or become a client, why I collect it, how I keep it safe, and what rights you have over it. It applies to this website and to my work with clients, whether in person at The Wellness Hub in Falmouth or online.

What information I collect

When you get in touch by email, I collect the information you choose to include, which is typically your name, email address, and whatever you tell me about why you are reaching out.

If you become a client, I also collect information relevant to your therapy, which may include your contact details, emergency contact details, GP details where relevant, and notes from our sessions together covering what we discuss and how the work is progressing. Session notes are likely to include details about your mental health, relationships, history, and other sensitive personal matters. Under UK data protection law, this counts as special category data, and I only hold it with your explicit consent, given when you agree to begin therapy with me.

I do not use cookies or analytics tracking on this website beyond what is necessary for it to function through the Squarespace platform it is built on.

Why I use your information

I use your contact details to respond to your enquiry and to arrange and manage sessions. I use session notes to support the continuity and quality of the therapeutic work, to meet the record keeping standards expected by my professional body, and to inform clinical supervision, which is a standard and required part of ethical psychotherapy practice.

Where I discuss your work in supervision, this is done in a way that protects your identity wherever possible, and my supervisor is bound by the same confidentiality obligations that I am.

How I store and protect your information

Client notes are kept on an encrypted, password protected USB storage device, which is kept securely and is not connected to the internet. Email correspondence is held in my regular business email account, which is password protected.

I take reasonable technical and organisational steps to protect your information against unauthorised access, loss, or damage. No method of storage is completely infallible, but I keep the amount of information I hold to what is necessary and keep it as securely as I reasonably can.

Who I share your information with

I do not sell or share your personal information with third parties for marketing purposes. I may need to share limited information in the following circumstances: with my clinical supervisor, in anonymised or pseudonymised form wherever possible, as part of my ongoing professional obligations; with my professional indemnity insurer or professional body, if a complaint or claim arises; with the emergency services, a GP, or another appropriate professional, if I believe there is a serious and immediate risk to your safety or someone else's; where I am required to do so by law.

Outside of a genuine safeguarding or legal requirement, I will not share details of what you tell me in sessions without your knowledge and, wherever possible, your consent.

How long I keep your information

I keep client records for seven years after our work together ends. This reflects standard practice for psychotherapy record keeping and takes into account potential future legal or professional requirements. After this period, records are securely deleted or destroyed.

Enquiry emails that do not lead to ongoing work are deleted within twelve months if no further contact is made.

Your rights

Under UK data protection law, you have the right to ask for a copy of the personal information I hold about you, to ask me to correct anything that is inaccurate, to ask me to delete your information in certain circumstances, to ask me to restrict how I use it, and to object to how I am using it. Where I rely on your consent to process special category data, such as therapy notes, you can withdraw that consent at any time, although this may affect my ability to continue working with you.

To exercise any of these rights, contact me at carl@innerwarriortherapy.co.uk. I will respond within one month.

If you are unhappy with how I have handled your personal information, you have the right to complain to the Information Commissioner's Office, the UK's independent regulator for data protection, at ico.org.uk or by calling 0303 123 1113.

Children

My practice works with adult clients only. I do not offer therapy to anyone under eighteen.

Changes to this policy

I may update this policy from time to time, for example if the way I work or store information changes. The date at the top shows when it was last revised.