Privacy Policy

The data controller is Sarah Marshall Counselling. 

I am registered with the Information Commissioners Office ICO: ZA300482

Information my website collects.


This site uses cookies. These are small text files that are placed on your computer by websites that you visit. They are used in order to make websites work efficiently, as well as to provide information to the owners of the site about people’s use of it.  

session cookies' these are stored only temporarily during your browsing session. To allow normal use of the site and are deleted from your device when the browser is closed.

Personal Information from your device is collected such as geolocation data, IP address, unique identifiers (e.g. MAC address) and other information which relates to your activity through the site. You can choose your use of cookies via the pop-up cookie notification and by following the instructions of your device preferences


My website host Go Daddy collects behaviour patterns of website visitors. This does not identify individuals but shows me 3 things. The number of site visits, number of specific page views, and the type of device used eg mobile, desktop, laptop. 

I also use google analytics as a third-party company to also collect behaviour patterns of website visitors. This information does not identify individuals but shows a collection of website usage from the number of website visits, frequently used pages etc. Google’s use and ability to share information collected via Google Analytics about your visits to this site is restricted by the Google Analytics Terms of Use and the Google Privacy Policy.

Website contact me button

No information from the contact me button is stored by the website. 

I use the personal data of your email address for correspondence with you regarding your enquiry about the services of Sarah Marshall counselling I only retain the information for the period we are in correspondence and then it is deleted as confidential waste.

I do not use the information you supply via the contact me button for marketing purposes or share with third parties unless I am required to by law. 

I use e mail when responding to website enquiries, this encrypts messages in using TLS Transport Layer Security on a basic level this means that emails can’t be read by third parties in transit. You probably have no idea if your email provider uses TLS so please bear in mind that sending information by email can’t always be guaranteed secure so please consider the level of personal information you share in an email.

General data protection regulation GDPR information for Sarah Marshall Counselling

This statement details how I collect, store or share/process your personal data including special category data.

What information do I collect?

Should you wish to become a counselling client I collect?

· Name

· Contact number

· E mail

· Address

· Date of birth

· Emergency contact name and number

· Doctors details

· Financial details (by proxy on my bank statement after you make payment)

What do I use this information for?

This client information is used as contact and emergency contact information while you are in counselling. I collect age for under 18’s to assist me to know when clients will turn 18 for the storing of notes 7 years after a child turns 18.(see data retention section below)

Do I share/store your personal data?

I only use your data in relation to the delivery of my services, and do not use it for marketing purposes or sell to third parties (unless you have consented). There are very specific limited counselling reasons why I may need to share/process your data.

Legitimate interest

1. It may become necessary during our work together for me to break confidentiality for safeguarding reasons, serious harm to self or others, acts of terrorism or drug trafficking/money laundering. The personal data shared will be adequate and proportionate eg the minimum required. Your information may be shared with health professionals & emergency services as appropriate. 

2. Clinical will. In the event of my death or becoming incapacitated a family member will pass a sealed envelope from my secure storage containing name and contact details of my current clients to my clinical supervisor. This is to enable my supervisor to make contact re my situation and to discuss counselling options going forward to maintain your safety. My clinical supervisor follows the same confidentiality system as me.

Legal obligation

1. I may be required to share information in your notes if I am issued with a court order.

2. I keep anonymous notes from our sessions in line with the requirements of my 

professional insurance and the limitation act. Special category data 9 (f) processing is 

necessary for the establishment, exercise or defence of legal claims or 

whenever courts are acting in their judicial capacity.

3. I am required to keep financial records for the purpose of tax returns for 7 years.


1. If you ask me to share your notes/information with other medical professionals or your legal representative. 

How long do I keep your information? (Data retention schedule)

1. If you choose not to continue with counselling after your assessment session your information will be disposed of 2 weeks after as confidential waste. 

2. If you choose to continue with counselling I keep client notes that are anonymous and separately name/email address for 7 years after your last session in line with the requirements of my professional insurance. For under 18’s name/contact and anonymous notes will be kept for 7 years after the age of 18 is reached. 

All information is stored as confidential data in locked storage, password protected document or encrypted memory stick and destroyed at the end of the data retention period as confidential waste. 

Your rights under GDPR

• Right to be informed, 

• Right to access (you can request to see information I hold about you) 

• Right of rectification, 

• Right to erasure, Not applicable to lawful reason legal obligation

• Right to restrict processing, 

• Right to data portability, Not applicable to lawful reason legal obligation /legitimate interest 

• Right to object, Not applicable to lawful reason/ legal obligation

• Rights related to automated decisions. 

It should be noted that the ICO says these are not all absolute rights:

If you have any concerns about how I have used your data you can discuss it with me in the first instance, my contact details

You also have the right to complain to the information commissioner’s office (ICO) 0303 123 1113 

This privacy statement is kept under regular review.