Counselling Privacy Policy

---

Sam M. Counselling

Last updated: 16/01/2026

Sam M. Counselling is a private counselling practice operated by Sam Marshall.

I am the data controller for the personal information you provide.

Contact details:
Email: info@sammcounselling.co.uk

I may collect and store the following information:

• Name
   
• Email address
   
• Mobile phone number
   
• Availability for sessions
   
• Information you choose to share in enquiry or consultation forms
   
• Counselling agreement responses
   
• Session-related administrative records
   
• Payment status (but not card details)
   

I only collect information that is necessary for providing counselling services or managing enquiries.

Because counselling involves mental health, some information you share may be classed as special category data under UK GDPR.

This data is handled with additional care and confidentiality and is only used for the purpose of providing counselling services.

Your information is used to:

• Respond to enquiries
   
• Arrange consultations and sessions
   
• Provide counselling services
   
• Send session reminders and relevant communications
   
• Manage payments and cancellations
   
• Meet professional, ethical, and legal obligations
   

I do not use your data for marketing without your consent.

Under UK GDPR, I rely on the following lawful bases:

• Consent – where you actively agree (e.g. contact by email, SMS)
   
• Contract – to provide counselling services once agreed
   
• Legal obligation – where record keeping is required
   
• Legitimate interest – for necessary administration of the practice
   

You can withdraw consent at any time (see section 9).

Your data is stored securely using:

• Microsoft 365 (Forms, SharePoint, Outlook)
   
• Secure email systems
   
• Encrypted, password-protected devices
   

I take reasonable steps to protect your information from unauthorised access, loss, or misuse.

Payments are processed via Stripe.

• I do not store or see your card details
   
• Stripe acts as a separate data controller for payment information
   
• Please refer to Stripe’s own privacy policy for payment processing details
   

Your information is not shared with third parties unless:

• required by law
   
• there is a serious risk of harm to you or others
   
• necessary for professional supervision (anonymised where possible)
   

I do not sell or trade personal data.

Under UK GDPR, you have the right to:

• Access the personal data I hold about you
   
• Request corrections to inaccurate data
   
• Withdraw consent (where consent is the lawful basis)
   
• Request deletion of data where appropriate
   
• Ask how your data is being used
   

Requests can be made by emailing info@sammcounselling.co.uk.

I only keep personal data for as long as necessary:

• Enquiry records: retained for a reasonable period
   
• Client records: retained in line with professional and legal guidance
   
• Financial records: retained as required by law
   

Data is securely deleted when no longer required.

If you have concerns about how your data is handled, please contact me first.

You also have the right to complain to the Information Commissioner’s Office (ICO):
https://ico.org.uk

This privacy policy may be updated from time to time.
The latest version will always be available on request or via the website.