top of page

Privacy Policy & Data Protection Policy

Rachel Starling Counselling
Website: www.rachelstarlingcounselling.co.uk

Last Updated: 18/6/26

​

Introduction

Rachel Starling Counselling is committed to protecting your privacy and handling your personal information with care and respect.

This Privacy Policy explains how personal information is collected, used, stored, and protected when you visit this website or contact Rachel Starling Counselling.

​

Data Controller

The data controller is:

Rachel Starling
Rachel Starling Counselling
Website: www.rachelstarlingcounselling.co.uk
Email: rachelstarlingcounselling@gmail.com

​

Information Collected

Information may be collected when you:

  • Complete a website contact form

  • Email or telephone Rachel Starling Counselling

  • Book an appointment

  • Visit the website

This information may include:

  • Name

  • Email address

  • Telephone number

  • Information you choose to share in an enquiry

  • Technical information such as IP address, browser type, and website usage data

​

How Information Is Used

Information is used to:

  • Respond to enquiries

  • Arrange consultations or appointments

  • Provide counselling services

  • Maintain business records

  • Improve website performance and user experience

Information will not be sold or shared for marketing purposes.

​

Lawful Bases for Processing

Personal information is processed under the following lawful bases:

  • Legitimate Interests (responding to enquiries and running the practice)

  • Contract (where counselling services are requested or provided)

Special Category Data

If you become a counselling client, I may process information relating to your physical or mental health. This information is classed as special category data under UK GDPR.

The lawful basis for processing this information is the provision of health and counselling services, together with my legitimate interests in providing safe and effective counselling. Processing of special category data is carried out in accordance with Article 9(2)(h) UK GDPR (health or social care purposes) and, where appropriate, Article 9(2)(a) (explicit consent).

​

Contact Forms

Information submitted through website contact forms is used solely to respond to enquiries and discuss potential counselling services.

Please avoid sending highly sensitive information through contact forms.

​

Cookies and Website Analytics

This website uses cookies and similar technologies to improve functionality, enhance user experience, and understand how visitors use the website.

This website uses Google Analytics 4 (GA4), a web analytics service provided by Google. Google Analytics helps me understand how visitors interact with the website, including which pages are visited, how long visitors spend on the site, and how users arrive at the website.

Google Analytics may collect information such as:

• Pages visited
• Time spent on pages
• Device and browser information
• Approximate geographic location
• Referring websites or search engines

Google Analytics does not provide me with information that directly identifies individual visitors.

Analytics cookies will only be used where you have provided consent through the website's cookie banner. You may withdraw or change your cookie preferences at any time.

Further information about how Google processes personal data can be found at: https://policies.google.com/privacy

You can also opt out of Google Analytics by visiting: https://tools.google.com/dlpage/gaoptout

​

Data Storage and Security

Reasonable technical and organisational measures are used to protect personal information from loss, misuse, unauthorised access, or disclosure.

Electronic records are stored securely and access is restricted where appropriate.

​

Data Retention

Website enquiries that do not lead to counselling will normally be retained for up to 12 months before being securely deleted.

Where counselling services are provided, records may be retained for up to 7 years after the end of therapy in line with common counselling practice and insurance requirements. (change to - records will be retained for 7 years following the end of counselling services, after which they will be securely destroyed, unless I am legally required to retain them for longer.)

​

Confidentiality

Information shared during counselling is treated confidentially. However, confidentiality may be limited where there are concerns about serious harm to yourself or others, safeguarding obligations, prevention or detection of serious crime, or where disclosure is required by law.

Any disclosure will be limited to what is necessary and, wherever possible, discussed with you first.

​

Sharing Information

Information will generally not be shared with third parties unless:

  • You have given consent

  • There is a safeguarding concern

  • There is a serious risk of harm to yourself or others

  • Disclosure is required by law

Where professional supervision is used, client anonymity will be protected wherever possible.

​

Your Rights

Under UK GDPR, you have the right to:

  • Request access to your information

  • Request correction of inaccurate information

  • Request deletion of information in certain circumstances

  • Restrict or object to processing

  • Request information about how your data is used

Requests can be made using the contact details above.

​

Complaints

If you have concerns about how your personal information is handled, or wish to make a data protection complaint, please contact Rachel Starling Counselling in the first instance.

In accordance with applicable UK data protection legislation, complaints relating to the handling of personal information will be acknowledged and responded to within 30 days wherever possible. If you remain dissatisfied following the outcome of your complaint, you have the right to complain to the Information Commissioner's Office (ICO). Website: https://ico.org.uk Telephone: 0303 123 1113.

​

International Transfers

Third party service providers which are used to support the operation of this practice, such as email, website hosting, or video conferencing providers, may store or process information outside the United Kingdom. Where this occurs, appropriate safeguards will be in place to ensure personal information remains protected in accordance with UK GDPR requirements.

​

​

Changes to This Policy

This Privacy Policy may be updated periodically. The latest version will always be available on this website.

bottom of page