Website Privacy Policy

This privacy policy explains what you should expect me to do with your personal information if you visit my website stuartangelltherapy.co.uk or submit an enquiry through it. It applies whether or not you go on to become a client.


ICO registration: ZC236682

Telephone: 07597 311371

If you become a client, a separate Client Privacy Notice sets out how I use your information once we begin working together – for example, your session notes and clinical records. I will make that notice available to you separately when you start therapy.

On this page

Contact details

Telephone: 07597 311371

Email: stuart@stuartangelltherapy.co.uk

Post: Stuart Angell, 124 City Road, London, EC1V 2NX

ICO registration number: ZC236682


Information I collect through my website

I collect or use the following information about you when you visit or use my website, or arrange an introductory session with me:

  • Cookies and similar technologies (see ‘Cookies’ below)

  • Your name, email address and any other details you choose to include when you submit an enquiry through my website contact form

  • The content of any message you send me through the contact form

  • If we arrange an introductory session, your video and audio during that call

I do not collect payment information through the website itself. If we arrange an introductory session, this is set up directly by email rather than through the website, and takes place over Zoom – see ‘Introductory sessions’ below. Appointment booking and payment for ongoing therapy are handled separately through my practice management software once you become a client, and are covered by my Client Privacy Notice.


Introductory sessions

If you and I arrange an introductory session, I use Zoom Video Communications, Inc. to conduct it. Video and audio are encrypted in transit, the session is protected by a unique password and a virtual waiting room, and I admit you manually so that no unauthorised person can join. I do not record introductory sessions – cloud recording, local recording and Zoom's automated transcription and AI Companion features are all disabled on my account. I have a data processing agreement in place with Zoom that incorporates the UK International Data Transfer Addendum, so my use of the platform is bound by UK data protection standards.

Everything you share with me, including during an introductory session, is treated in confidence, in the same way as described in my Client Privacy Notice. I do not keep notes from an introductory session; if you go on to become a client, note-taking from that point on is covered by my Client Privacy Notice.

If you choose to share health-related information during our conversation, my condition for processing this special category data is the same as described in my Client Privacy Notice: the ‘health or social care purposes’ condition under Article 9(2)(h) UK GDPR and paragraph 2 of Schedule 1 to the Data Protection Act 2018, which applies because I am bound by a professional duty of confidentiality through my UKCP membership.


Phone calls and text messages

As well as my website’s contact form, I also have a dedicated mobile telephone number, published on my website and on external counselling directories, for calls and text messages with prospective and current clients. This number is separate from my personal phone, is password protected, and is not used for personal purposes. Voicemail is enabled on this number, provided through my network provider.

If you choose to share health-related information during a call, text or voicemail, my condition for processing this special category data is the same as described in my Client Privacy Notice: the ‘health or social care purposes’ condition under Article 9(2)(h) UK GDPR and paragraph 2 of Schedule 1 to the Data Protection Act 2018, which applies because I am bound by a professional duty of confidentiality through my UKCP membership.

I do not keep an ongoing archive of calls, texts or voicemails. If you become a client, or request to be added to my client waiting list, any information transferred into your secure client file is then held in line with my Client Privacy Notice.


How I use this information and my lawful basis

  • To respond to your enquiry – I use your name and contact details, and the content of your message, to reply to you and discuss whether I can help. My lawful basis for this is legitimate interests – I have a legitimate interest in responding to prospective clients, and this causes no undue risk of harm to you, as your information is kept confidential and is not used for any other purpose.

  • To respond to a call or text message – I use your phone number, and the content of your call or message, to reply to you and discuss whether I can help. My lawful basis for this is legitimate interests – I have a legitimate interest in responding to prospective clients, and this causes no undue risk of harm to you, as your information is kept confidential and is not used for any other purpose.

  • To conduct an introductory session – I use your name, contact details, and video and audio during the call, to hold an introductory session and assess whether I can help you. My lawful basis for this is legitimate interests – I have a legitimate interest in offering prospective clients a preliminary conversation to establish fit, and this causes no undue risk to you, as the session is conducted confidentially and securely, and no notes are kept unless you become a client.

  • Cookies – where cookies are not strictly necessary for the website to function, I rely on your consent, which you can give or withdraw through the cookie banner or settings on my website.


How long I keep this information

If you submit an enquiry, contact me by phone or text, or have an introductory session, but do not go on to become a client, I will delete your enquiry details once it's clear you're not proceeding, otherwise within 6 months. I do not keep a separate record of an introductory session itself. If you become a client, or request to be added to my client waiting list, your information is transferred to my secure, encrypted client records and is then held in line with my Client Privacy Notice.

Still working through this? Here’s the contents list again.

Who I share this information with

Squarespace, Inc. (website content management provider) – securely captures and routes enquiries submitted through my website’s encrypted contact form.

Microsoft Corporation (Microsoft 365 email hosting provider, information technology sector, US-based servers) – hosts and processes messages sent to and from my administrative email inbox, including enquiries and arranging introductory sessions.

Tesco Mobile Limited (mobile network provider, operating via the O2 network, UK-based) – provides the calls, text messaging and voicemail service for my dedicated business mobile number; see ‘Phone calls and text messages’ above for how I limit what is retained.

Zoom Video Communications, Inc. (video conferencing provider, US/global-based servers) – provides the secure, encrypted video conferencing platform I use to conduct introductory sessions; see ‘Introductory sessions’ above for the safeguards I have in place.

I will never pass on your contact details to any third-party organisation for the purposes of sales, marketing or research.


Sharing information outside the UK

Where necessary, I may transfer personal information outside the UK. When I do, I comply with the UK GDPR and make sure appropriate safeguards are in place.

Squarespace, Inc. – country: United States. Safeguard: Squarespace is self-certified under the UK Extension to the EU-U.S. Data Privacy Framework, which the UK government recognises as providing an adequate level of data protection for this transfer. Its Data Processing Addendum also incorporates the UK International Data Transfer Addendum to the European Commission’s Standard Contractual Clauses as a fallback, should the framework ever cease to apply.

Microsoft Corporation – country: United States. Safeguard: Microsoft is certified under the UK Extension to the EU-U.S. Data Privacy Framework, which the UK government recognises as providing an adequate level of data protection for this transfer.

Zoom Video Communications, Inc. – country: United States. Safeguard: Zoom’s standard contract incorporates the UK International Data Transfer Addendum issued under section 119A of the Data Protection Act 2018, appended to the European Commission’s Standard Contractual Clauses. This contractually obliges Zoom to maintain data protection standards equivalent to those within the UK.


Cookies

My website is hosted by Squarespace. I use cookies and similar technologies to help my site run effectively and securely, and to understand how you interact with my services.

I categorise the cookies used on this website into two types:

  • Essential and Functional Cookies: These cookies are always used because they allow Squarespace, my hosting platform, to securely serve this website to you and ensure core features work properly.

  • Analytics and Performance Cookies: These cookies are used only when you acknowledge my cookie banner. I use these analytics cookies to view site traffic, understand visitor trends, and improve my website's performance.

Managing Your Preferences

You can choose to accept or decline analytics cookies at any time via the cookie banner on my website. You can also configure your web browser settings to block or delete cookies entirely. Please note that disabling essential cookies may impact your ability to use certain features of this website.


Your data protection rights

Under UK data protection law, you have the following rights over your personal information:

  • Right of access – you can ask me for copies of your personal information, and for details of where I get it from and who I share it with.

  • Right to rectification – you can ask me to correct or delete personal information you think is inaccurate or incomplete.

  • Right to erasure – you can ask me to delete your personal information.

  • Right to restriction of processing – you can ask me to limit how I use your personal information.

  • Right to object – you can object to my processing of your personal data.

  • Right to data portability – you can ask me to transfer the personal information you gave me to another organisation, or to you.

  • Right to withdraw consent – where I rely on consent, such as for non-essential cookies, you can withdraw that consent at any time.

There are some exemptions to these rights, which means you may not always receive everything you ask for. You can read more about your rights on the ICO's website. If you make a request, I must respond without undue delay and within one month. To exercise any of these rights, please contact me using the details above.


If you have any concerns about my use of your personal information, please contact me:

If you remain unhappy with how I have used your data after raising a complaint with me, you can also complain to the ICO. I am registered with the ICO under reference number ZC236682.

Information Commissioner's Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF.

Helpline: 0303 123 1113. Website: https://www.ico.org.uk/make-a-complaint