Countryside Counselling (Maya Cox) is the data controller for the information you provide. I am registered with the Information Commissioner’s Office (ICO). This notice explains what personal information I hold, why, and your rights. You can contact me about anything here at hello@countrysidecounselling.com.

If you contact me through this website

When you use the enquiry form or email me, I collect only what I need to reply - usually your name, email address, phone number (if you give it), and whatever you choose to tell me in your message. I use these details solely to respond to your enquiry and, if you decide to go ahead, to arrange an introductory call.

My lawful basis is my legitimate interest in responding to people who get in touch, and your consent in choosing to contact me. Please don’t share sensitive details (such as health information) through the form - there’s no need at this stage, and we can talk properly on your introductory call.

If you don’t become a client, I keep your enquiry only as long as needed to deal with it and then delete it. If you do go on to work with me, your information is handled as set out below and in the client documents I’ll share with you.

The website itself

My website is built and hosted on Squarespace. Like most websites, it may use essential and analytics cookies to work properly and to help me understand how the site is used. You can control cookies through your browser settings. The platform’s own privacy information explains how it processes technical data such as IP addresses.

What I collect (as a client)

• Contact details: your name, email, phone number and, where relevant, address.

• An emergency/next-of-kin contact and, where appropriate, your GP.

• Brief session notes and information about your wellbeing and the issues you bring - this is “special category” (health) data, which the law protects more strongly.

• Payment records needed for my accounts and tax.

Why I hold it and my lawful basis

I use your information to provide counselling, arrange appointments, keep safe and accurate records, and meet my legal and professional obligations. My lawful bases under UK GDPR are Article 6(1)(b) (performing our contract) and, for health information, Article 9(2)(h) (the provision of health or social care) supported by your explicit consent, which you can withdraw at any time.

How I store and protect it

Records are kept securely: digital notes are stored encrypted and password-protected, and any paper is kept in a locked cabinet. I use reputable, UK/EEA-based, encrypted tools for video, note-keeping and email. I do not store data on a personal, unsecured device or inbox.

Who I share it with

I do not sell or routinely share your data. I may share limited information with my clinical supervisor (with your identity protected), with a professional executor if I were unable to continue practising, or where I am legally required to.

How long I keep it

I keep client records for 7 years after our final session, after which they are securely destroyed. This retention period reflects insurance and professional guidance. Website enquiries that don’t lead to counselling are deleted once dealt with.

Your rights

You have the right to see the information I hold about you, to have inaccuracies corrected, and, in certain circumstances, to have it erased or restricted. To exercise any of these, contact me at hello@countrysidecounselling.com. If you are unhappy with how I handle your data, you can complain to the ICO at ico.org.uk or on 0303 123 1113.