🔒 Privacy Policy

Last updated: 2nd September 2025

This Privacy Policy explains how Sarah Vellacott Consultancy (“we”, “our”, “us”) collects, uses and protects your personal data when you use our website and services.

1. Who we are

Sarah Vellacott Consultancy

Email: [sarah@sarahvellacott.co.uk

Location: Warwickshire, United Kingdom

2. What personal data we collect

We may collect:

  • Contact details (name, email, phone number).

  • Information you provide when booking sessions or purchasing downloads.

  • Clinical information you choose to share when seeking therapy or supervision.

  • Children’s information, where services are provided directly to a child or to a parent/carer on their behalf. This may include health, communication, and eating/drinking/swallowing needs.

  • Payment details (processed securely via our payment provider).

  • Technical information (cookies, IP address, browser type).

3. How we use your data

We use your personal data to:

  • Provide therapy, supervision, or consultancy services.

  • Process payments and deliver digital downloads.

  • Communicate with you (appointments, enquiries, updates).

  • Meet legal, clinical, and professional record-keeping obligations.

  • Safeguard children, young people, and vulnerable adults where necessary.

  • Improve our website and services.

4. Legal basis for processing

We rely on:

  • Contract – to deliver the services you request.

  • Legal obligation – to maintain clinical and financial records.

  • Consent – for marketing emails or optional cookies.

  • Legitimate interests – for business administration and service improvement.

5. Sharing your data

We do not sell your data. We may share it with:

  • Payment processors (e.g., Stripe, PayPal).

  • Squarespace (for website hosting and analytics).

  • Professional supervisors/insurers if legally or ethically required.

  • Safeguarding authorities (e.g., GP, social services, emergency services) if we believe someone is at risk of harm.

  • Legal or regulatory authorities if required by law.

6. Data storage and retention

  • Adults: client records are kept for 7 years after the last contact.

  • Children: client records are kept until the child’s 25th birthday (or 26th if treatment ends after their 17th birthday).

  • Financial/tax records are kept for a minimum of 6 years.

  • Other personal data is kept only as long as necessary.

7. Your rights

You have the right to:

  • Access your data.

  • Request correction or deletion.

  • Withdraw consent (where processing is based on consent).

  • Object to processing.

  • Lodge a complaint with the Information Commissioner’s Office (ICO).

8. Security

We take appropriate measures to protect your data from loss, misuse, or unauthorised access.

9. Changes

We may update this Privacy Policy from time to time. Updates will appear on this page with a new “last updated” date.

10. Contact

If you have questions about this policy or your data:

Sarah Vellacott Consultancy

Email: sarah@sarahvellacott.co.uk

Location: Warwickshire, United Kingdom