Privacy Policy

The website for Alyssa Millbrook is We are committed to protecting and respecting your privacy in compliance with the General Data Protection Regulation (GDPR).

Our privacy policy explains when and why we collect personal information about people who visit our website, how we use that information, the conditions under which we may disclose information to others with your consent and how we keep information secure.

We may change our privacy policy from time to time so please check this page periodically to ensure that you’re happy with any changes. Any changes will be effective immediately upon the posting of the revised policy. By using our website, you’re agreeing to be bound by this policy.


Alyssa Millbrook operates a private practice in Cambridge, England. She is a qualified Dramatherapist. She is a full member of the British Association of Dramatherapists, registered with the Health and Care Professions Council (HCPC), and insured by Psychologists Protection Society.


We obtain information about you when you use our website contact form, send us an email, call or text, send us information through the post, fill out a form in person or online, or verbally give us information in our practice.


Certain data is held in order to work safely and professionally. Three types of information may be collected:

  • Information on website traffic

    • Like many other websites, the Arbor Creative Psychotherapy website may use cookies. 'Cookies' are small pieces of information sent by an organisation to your computer and stored on your hard drive to allow that website to recognise you when you visit.

    • None of the cookies we use collect your personal information and they can’t be used to identify you.

    • It is possible to switch off cookies by setting your browser preferences. Turning cookies off may result in a loss of functionality when using our website.

  • Contact information if you make an inquiry

    • The personal information we collect might include your name, address, email address, telephone number and other information that you consent to provide on our website contact form, by phone, or email. This information is used to provide you with information or services that you have requested and will not be passed on to a third party.

  • Case notes

    • These may include information shared during assessment, therapy sessions, and consultations about yourself or your child. This information may be collected verbally or in writing.

    • Information may also be taken about relevant family or medical history, as well as details of an emergency contact.

    • A signed consent form for therapy, in paper or electronic form, will also be taken at the first appointment.


Our website may contain links to other websites run by other organisations. This privacy policy applies only to the Arbor Creative Psychotherapy website, so we encourage you to read the privacy statements on the other websites you visit. Alyssa Millbrook is not responsible for the privacy policies and practices of other sites even if you access them using links from our website.

​Embedded content from third-party websites also behaves as if the visitor has visited the other website (YouTube, etc), including tracing your interaction with the embedded content if you have an account and are logged in to that website.

In addition, if you linked to our website from a third-party website, Alyssa Millbrook is not responsible for the privacy policies of that third-party site and recommends that you check the privacy policy of that third-party site.


All personal data collected during your appointments is kept confidential according to the codes of practice and ethics of the Health and Care Professions Council and the British Association of Dramatherapists. Personal information is not disclosed to any other third parties except in the circumstances listed below.

Limits on confidentiality include:

  • If a client poses a clear and imminent danger to themself or to someone else.

  • If there is an indication of child abuse or abuse of a dependent adult.

  • If a client requests and signs a release of information, for instance, in a report issued to a third party.

  • If the court orders a release of information or if the client raises the issue of their own mental health via a lawsuit.

In the case of the therapist’s death, incapacitation, or serious illness, your details will become accessible to the trustee(s) of the therapist’s clinical will. This is in order for you to be informed by the trustee of circumstances that may affect you/your access to therapy. If you would prefer your details not be included in a clinical will, please inform Alyssa.

The confidentiality of the therapy and its limits will be discussed with the client at the first appointment and will be included in the signed consent form.


From 25th May 2018, under the General Data Protection Regulations (GDPR) Alyssa Millbrook is required by law to inform you as a client or potential about how your data is processed and kept safe.

  • Personal Details

    • Your referral form, including name, contact details, and signed consent, is kept in a locked cabinet (if in paper form) or in a password-protected, encrypted folder on a password-protected computer (if electronic). These are kept separate from your session notes.

    • If sending sensitive information by email, it is recommended that you use an encryption service to ensure your security. FlowCrypt, for example, is a free browser extension compatible with most existing email addresses regardless of provider.

    • In line with best practice guidelines, Alyssa regularly meets with a professional clinical supervisor. Her supervisor will see your first name, but not your surname or any other identifying details.

    • This information will be retained for seven years after last contact per the professional insurer’s guidance; after this time, they will be deleted/destroyed.

  • Session Notes

    • Session notes may include dates and times of attendance, and brief notes on important themes from the session. These are anonymised and kept securely in a separate password-protected, encrypted folder on my computer. These are kept separately from your referral form that contains your personal details.

    • Current policy is to destroy session records three years after the conclusion of therapy. If you would like them to be retained for a longer period, please discuss this with Alyssa.

  • Creative Material

    • Art works and creative material from the sessions are stored securely in a locked box for the duration of therapy. It is standard practice for this material to be retained by the therapist whilst therapy is ongoing, however, you may choose to take them away with you at any agreed time.

    • Some creative material may be temporary (e.g. play-dough, sand tray) and will be dismantled after a session. You may choose to photograph this material, and as such you are responsible for the security of the content.

    • When our work together ends, you may take your works away. If you choose not to take them, they will be disposed of securely.

If you would like information about the data held on you, or any further information about this policy, please feel free to contact

Updated February 2022