Privacy Policy

I take your privacy seriously. This page explains what personal information I collect, how I use it, how it is stored, and your rights under Norwegian and European data protection law.

Therapy Oslo is run by me, Andi Kerr Little. I am a psychotherapist based in Oslo, Norway. When I refer to "I", "me", or "my" on this page, I mean my private therapy practice.

What information I collect

I collect personal information in two main ways:

• Through the website: When you fill out the contact form or book a free consultation, I collect your name, email address, phone number, and any message or details you choose to share.
• During therapy sessions: I keep clinical notes of our sessions. These include information you share about your background, current situation, and the therapeutic work we do together.

How I use your information

I use your personal information only for the following purposes:

• To respond to your enquiry or consultation request.
• To schedule and provide therapy sessions.
• To maintain a clinical record of your therapy, as required by Norwegian health regulations.
• To send you relevant information about your therapy (such as appointment reminders or invoices).

I do not use your information for marketing purposes unless you have specifically requested updates from me. I will never sell or share your data with third parties for commercial purposes.

Third-party tools

I use the following third-party services to run this website and manage enquiries:

• GoHighLevel: Contact form submissions are stored in GoHighLevel, a client relationship management (CRM) platform. GoHighLevel is GDPR-compliant and processes data securely.
• Google Analytics: I use Google Analytics to understand how people use this website. Data is anonymised and cannot be traced back to individual visitors.

No personal health information from therapy sessions is stored on these platforms.

Confidentiality and session notes

Everything you share in therapy is confidential. I do not discuss your sessions with anyone else without your explicit written consent.

The only exceptions to this are situations where:

• There is a serious and immediate risk of harm to you or another person.
• I am legally required to disclose information (for example, by a court order).

If I ever need to break confidentiality, I will discuss this with you first unless doing so would increase the risk of harm.

Session notes are kept in a secure, encrypted digital system. They are not shared with insurance companies, employers, or any other third party unless you have given written permission.

How long I keep your data

Norwegian health law requires me to keep clinical notes for five years after the last session. After this period, records are securely deleted.

Contact form data (name, email, phone number) is stored for as long as necessary to respond to your enquiry. If you do not proceed with therapy, this data is deleted after one year.

Your rights

Under GDPR and Norwegian data protection law, you have the right to:

• Request a copy of the personal data I hold about you.
• Request that I correct any inaccurate or incomplete information.
• Request that I delete your data (subject to legal obligations to retain clinical records).
• Withdraw consent for me to process your data at any time.

If you would like to exercise any of these rights, or if you have questions about how I handle your data, please email me at Andikerrlittle@gmail.com.

Data security

I take the security of your data seriously. Session notes are stored in an encrypted digital system that complies with Norwegian health data regulations. Only I have access to these records.

Website data (contact forms) is transmitted securely using SSL encryption and stored on secure servers managed by GoHighLevel.

Changes to this policy

I may update this privacy policy from time to time. If I make significant changes, I will update the date at the top of this page. I recommend checking this page occasionally if you have ongoing contact with me.

Questions or concerns

If you have any questions about this privacy policy, or if you would like to make a complaint about how I handle your data, please contact me at Andikerrlittle@gmail.com.

You also have the right to lodge a complaint with the Norwegian Data Protection Authority (Datatilsynet) if you believe your data has been mishandled.