privacy policy

Privacy Policy

Effective Date: 1/4/2026
Last Updated: 1/4/2026

1. Introduction

This Privacy Policy explains how anguscounselling.com (“we”, “us”, “our”) collects, uses, stores, and protects your personal information when you use this website or engage with our counselling services.

We are committed to protecting your privacy and complying with applicable data protection laws, including the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

2. Contact Details

Data Controller: Angus MacAlister
Email: angus@anguscounselling.com
Phone: 07734566850
Address: 25 Saunton Road, EX33 1HD

If you have any questions about this Privacy Policy or how your data is handled, please contact us using the details above.

3. What Information Is Collected and Why

We may collect and process the following types of personal data:

1. a) Identity and Contact Data

• Name
• Email address
• Phone number

Purpose: To respond to enquiries, arrange appointments, and communicate with you.

1. b) Health and Sensitive Information (Special Category Data)

• Information relating to your mental health and wellbeing
• Relevant personal history shared during counselling

Purpose: To provide safe and effective therapeutic services.

1. c) Technical Data

• IP address
• Browser type and version
• Website usage data (via cookies or analytics tools)

Purpose: To improve website performance and user experience.

4. Safeguarding and Public Protection

Confidentiality is a core principle of counselling; however, there are circumstances where we may need to share information without your consent.

These include where:

• There is a risk of serious harm to you or others
• There are safeguarding concerns involving children or vulnerable adults
• Disclosure is required by law (e.g. court order, prevention of crime)

Where possible, we will aim to discuss any disclosure with you beforehand.

5. Legal and Administrative Purposes

We may process your personal data for:

• Record-keeping and clinical notes
• Appointment scheduling and administration
• Invoicing and financial records
• Professional clinical supervision (anonymised)
• Insurance and legal compliance

6. Lawful Bases for Processing

Under UK GDPR, we rely on the following lawful bases:

• Consent: When you contact us or agree to counselling services
• Contract: Where processing is necessary to deliver agreed services
• Legal Obligation: To comply with legal and regulatory requirements
• Legitimate Interests: For the safe and effective operation of the practice

7. Special Category Data Condition

As a counselling service, we process special category (sensitive) data relating to health.

We rely on the following conditions:

• Explicit Consent
• Provision of Health or Social Care (Article 9(2)(h) UK GDPR)

8. Where Personal Information Is Obtained

We collect personal information:

• Directly from you (e.g. via contact forms, email, phone, or in sessions)
• Through your use of this Website (e.g. cookies and analytics)
• Occasionally from third parties, where appropriate (e.g. referrals), with your consent

9. How Long Information Is Kept

We retain personal data only for as long as necessary.

Typical retention periods:

• Client records: 5 years after the end of counselling (in line with professional guidance)
• Enquiry data (non-clients): Up to 12 months
• Financial records: 6 years (for HMRC compliance)

After this period, data will be securely deleted or destroyed.

10. Who Information Is Shared With

We will not sell or share your personal data for marketing purposes.

We may share information with:

• Professional clinical supervisors (anonymised)
• Legal or regulatory bodies, where required
• Emergency services or safeguarding authorities, where necessary
• Accountants or financial service providers (limited data only)

11. Data Processors

We may use trusted third-party service providers (“data processors”) to support our services, such as:

• Email providers – Titan email
• Secure cloud storage providers – Google
• Payment services – Tide
• Web Hosting – WordPress
• Text and voice communication – WhatsApp

All data processors are required to:

• Process data only on our instructions
• Keep data secure
• Comply with UK GDPR

12. Data Security

We take appropriate technical and organisational measures to protect your personal data, including:

• Secure storage systems (password protected and/or encrypted)
• Restricted access to client information
• Secure disposal of records

However, no method of transmission over the internet is completely secure.

13. Your Data Protection Rights

Under UK data protection law, you have the right to:

• Access your personal data
• Request correction of inaccurate data
• Request erasure of your data (where applicable)
• Restrict or object to processing
• Data portability
• Withdraw consent at any time (where consent is the basis for processing)

Requests can be made using the contact details above. We aim to respond within one month.

14. Cookies and Website Tracking

This Website may use cookies to:

• Improve functionality
• Analyse website usage
• Enhance user experience

You can control or disable cookies through your browser settings.

For more information, please see our Cookie Policy.

15. Complaints

If you are unhappy with how your data has been handled, you have the right to lodge a complaint with the Information Commissioner’s Office (ICO):

Website: https://www.ico.org.uk
Phone: 0303 123 1113

We would appreciate the opportunity to address your concerns first.

16. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. Updates will be posted on this page with a revised “Last Updated” date.

17. Contact

If you have any questions about this Privacy Policy or your personal data, please contact:

Angus MacAlister
Email: angus@anguscounselling.com
Phone: 07734566850
Address: 25 Saunton Road, EX33 1HD

End of Privacy Policy