What client records actually include
In private practice, a client record is more than a name and phone number. Properly maintained, it covers:
- Contact details — name, phone, email, emergency contact
- Session history — dates, session types, attendance, payment status
- Clinical notes — session notes, risk assessments, formulations
- Documents — consent forms, working agreements, referral letters, correspondence
- Communication history — confirmation emails, reminders, any written exchanges
Most therapists manage these across a combination of a phone contacts list, a paper diary or Google Calendar, a folder of Word documents, a notebook, and a spreadsheet tracking payments. Each system works in isolation but nothing talks to anything else, and finding information when you need it — before a session, during a supervision, or when a client asks for their records — takes longer than it should.
What BACP and GDPR say about record keeping
The BACP Good Practice in Action guidance recommends that records are:
- Kept securely, with access restricted to those who need them
- Factual, relevant, and written with the assumption that the client may read them
- Retained for a minimum of seven years after the end of the therapeutic relationship (longer for records involving minors)
- Disposed of securely when the retention period ends
UK GDPR adds the requirement that personal data must be stored with appropriate technical security measures. For special category data — which clinical notes are — that means encryption is effectively a baseline expectation rather than an optional extra.
What good record management looks like in practice
A well-organised client record system should let you:
- Find any client’s details or history in under a minute
- Know immediately which clients have outstanding payments
- Retrieve a specific session note without trawling through a folder of files
- Export or delete a client’s records cleanly when they leave your practice
- Demonstrate to a regulator or insurer that records are stored securely
How Counselling Buddy organises this
Counselling Buddy gives each client a single profile that holds everything — contact details, session history, session notes, uploaded documents, and payment status — in one place. Search works across all of it.
Session notes are encrypted and linked to both the client profile and the specific session they relate to. Documents — consent forms, referral letters, worksheets — are uploaded directly to the client profile. Payment history shows every session, amount, and status at a glance.
When a client leaves your practice, you can archive their profile (hiding it from your active list while keeping records intact) or delete it entirely. Deletion is permanent, cascading across all associated data, and confirmed with an audit log — giving you a clear record that the deletion happened and when.
Data is stored on UK-based, ISO 27001 certified infrastructure, encrypted at rest and in transit. A formal Data Processing Agreement is available from your account settings, confirming Counselling Buddy’s obligations as your data processor under UK GDPR Article 28.