Privacy

Privacy Notice 

Caroline Heron Counselling 

Last updated: 21 August 2026

Your privacy matters to me. This notice explains how I collect, use and protect your personal information when you visit my website or contact me about counselling. I follow UK data protection law, including UK GDPR, ICO and the Data Protection Act 2018.

Who I am 

Caroline Heron Counselling is the data controller for information you provide. Email: hello@carolineheroncounselling.co.uk

Information I collect 

When you contact me through the enquiry form, I may collect your name, email address, phone number and any brief message you choose to include. You do not need to share detailed or sensitive information at this stage. Basic technical information may also be collected automatically to help the website function. I use Google Analytics to collect anonymous visitor statistics.

How I use your information 

I use your information to:

• respond to your enquiry

• communicate with you about counselling

• understand whether my service may be suitable

• arrange appointments

• meet my legal, professional and safeguarding responsibilities

I only collect information that is reasonably necessary for these purposes.

Sensitive information 

If you choose to include information about your mental health or other sensitive matters, this may be classed as special category data. I only process this information where there is a lawful basis under UK GDPR and where it is necessary for counselling or safeguarding. I will not ask for detailed clinical information through the initial enquiry form.

Lawful basis 

I may process your information because:

• it is necessary to respond to your enquiry or take steps before entering into a counselling agreement

• it is necessary for my legitimate interests in running my practice

• I need to comply with legal or professional obligations

• it is necessary to protect someone’s vital interests in an emergency

How your enquiry form is processed 

The enquiry form is provided through Sessionly. When you submit it, your information is transferred to Sessionly and made available to me through my account. Sessionly’s own privacy arrangements also apply.

Sharing your information 

I do not sell or trade your information. I may share information with service providers who support my practice (such as Sessionly, Microsoft or website providers), professional advisers, insurers, or relevant authorities where required by law or safeguarding. I do not routinely share counselling information without your knowledge.

How long I keep your information

• If you make an enquiry but do not become a client: normally kept for 12 months, then securely deleted.

• If you become a client: information is kept according to professional and insurance requirements. Details are provided in the counselling agreement.

Security 

I take reasonable steps to protect your information from loss, misuse or unauthorised access. No online system can be guaranteed completely secure.

Your rights 

You may have rights to access, correct, delete or restrict your information, or to object to certain processing. To exercise these rights, contact: hello@carolineheroncounselling.co.uk I may need to confirm your identity before responding.

Cookies 

This website is hosted on Google Sites, which may use cookies necessary for security and basic functionality. I use Google Analytics and the website uses cookies to collect anonymous visitor statistics.

Children’s information 

Where enquiries relate to children or young people, information is handled with particular care and in line with safeguarding and professional requirements.

Confidentiality and safeguarding 

Counselling is confidential, but there are limits. Information may need to be shared if there is a serious risk of harm, a safeguarding concern, or a legal requirement. I will discuss this with you where appropriate.

Changes to this notice 

This notice may be updated if my practice or legal obligations change.

Complaints 

You can contact the Information Commissioner’s Office (ICO) if you have concerns about how your information has been handled.