Privacy Policy
Last updated: June 2026
We are committed to protecting your privacy and handling your personal information responsibly. This Privacy Policy explains what data we collect through this website, how we use it, and your rights under UK data protection law, including the UK GDPR and the Data Protection and Digital Information Act 2024 (coming into force June 2026).
By using this website, you agree to the practices described here.
1. Who We Are
St John's Counselling, 9-11 New Road, Bromsgrove, B60 2JG and Atlas Counselling & Support CIC, 9-11 New Road, Bromsgrove, B60 2JG
counsellingstjohns@gmail.com
We act as the Data Controller for the personal data collected through this website. Where required, we have appointed a Senior Responsible Individual (SRI) to oversee data protection compliance.
2. What Personal Data We Collect
We may collect:
- Contact details (name, email address, phone number)
- Information you submit through contact or enquiry forms
- Technical data (IP address, browser type, device information)
- Usage data (pages visited, time spent on the site, interactions)
- Cookies and similar technologies (see section 9)
Important: This website does not store or process therapy notes, clinical records, or special category data such as health information. Any sensitive information is handled through secure, non‑website channels in line with our Data Protection Policy.
3. How We Use Your Data
We use your data to:
- Respond to enquiries
- Provide information about our services
- Improve website performance and user experience
- Maintain security and prevent misuse
- Meet legal or regulatory obligations
We do not use automated decision‑making or profiling that has legal or significant effects.
4. Legal Bases for Processing
We process personal data under:
- Consent – when you submit a form or request information
- Contract – when processing is needed to provide a service you request
- Legal obligation – where required by law
- Legitimate interests – to operate, secure, and improve our website
We may also rely on recognised legitimate interests introduced by the Data Protection and Digital Information Act, such as preventing fraud and ensuring network and information security.
You can withdraw your consent at any time by contacting us using the details in the “Contact Us” section. This will not affect the lawfulness of processing carried out before consent was withdrawn.
5. Data Retention
We keep personal data only for as long as necessary for the purposes described in this policy.
6. How We Store and Protect Your Data
We use appropriate technical and organisational measures, including:
- Encrypted connections (HTTPS)
- Secure servers
- Restricted access
- Regular security reviews
7. Sharing Your Data
We do not sell or trade your personal information.
We may share data with:
- Trusted service providers (e.g., website hosting, analytics tools, form providers)
- Legal or regulatory authorities where required
These providers act on our behalf and are required to keep your data secure and comply with UK data protection law.
8. International Transfers
If we transfer personal data outside the UK, we will only do so where appropriate safeguards are in place, including UK adequacy regulations or other approved transfer mechanisms.
9. Your Rights
You have the right to:
- Access your personal data
- Correct inaccurate information
- Request deletion of your data
- Withdraw consent
- Object to certain types of processing, including direct marketing
- Request data portability
When you make a request to access, correct, or delete your data, we may ask for additional information to verify your identity or clarify your request, as permitted under the Data Protection and Digital Information Act 2024.
If you have concerns, you can contact the Information Commissioner’s Office (ICO) at ico.org.uk.
10. Cookies
Our website may use cookies to:
- Improve functionality
- Analyse website traffic
- Enhance user experience
You can control or disable cookies through your browser settings. For more detail, see our Cookie Policy.
If we use analytics tools such as Google Analytics, these may collect anonymised or pseudonymised data such as page views, device type, and browsing patterns. You can opt out through your browser settings or by adjusting cookie preferences.
11. Children’s Data
This website is not intended for children under 13, and we do not knowingly collect personal data from children. If we become aware that a child has provided personal information, we will delete it promptly.
12. Security Incidents
If we become aware of a data breach that may pose a risk to your rights or freedoms, we will notify you and the Information Commissioner’s Office (ICO) where legally required.
13. Accessibility
We aim to make this website accessible to all users. If you experience any difficulty accessing information, please contact us and we will provide the information in an alternative format.
14. Complaints About Data Protection
If you have concerns about how we handle your personal data, please contact us using the details in the “Contact Us” section. We will do our best to resolve your concerns.
If you remain dissatisfied, you can raise a complaint with the Information Commissioner’s Office (ICO): ico.org.uk.
15. Links to Other Websites
Our website may contain links to external sites. We are not responsible for the privacy practices of those websites.
16. Changes to This Policy
We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated revision date.
We review this Privacy Policy regularly to ensure it reflects current legislation, including the Data Protection and Digital Information Act 2024.
17. Contact Us
If you have questions about this Privacy Policy or how we handle your data, please contact:
St John's Counselling, 9-11 New Road, Bromsgrove, B60 2JG
Or
Atlas Counselling & Support CIC, 9-11 New Road, Bromsgrove, B60 2JG
counsellingstjohns@gmail.com
