Privacy Policy

Privacy Policy
Effective Date: 21 February 2025
Last Updated: 25 April 2025
Data Controller: Sarah Webber trading as Sarah Webber Wellbeing
Contact: sarahwebberwellbeing@gmail.com
Website: www.sarahwebberwellbeing.co.uk

Introduction

At Sarah Webber Wellbeing, your privacy is important to us. This privacy policy outlines how we collect, use, store, and protect your personal information in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

We may occasionally update this policy to reflect changes in legislation, services, or internal practices. When we do, we’ll publish the changes on this website and notify you where appropriate.

Scope of This Policy

This policy applies to all personal data we process as a data controller, whether the data is collected via our website, email, social media, in person, or any other communication method. It applies to anyone who interacts with us, including prospective clients, clients, partners, and website visitors.

We are guided by the following principles:

  • Collect only what is necessary and explain why.

  • Use your data lawfully, fairly, and transparently.

  • Keep your data secure and confidential.

  • Retain your data only as long as necessary.

What Information We Collect

We may collect the following types of personal data:

  • Personal details (name, contact information)

  • Family, lifestyle, or social circumstances (if relevant to your work with us)

  • Physical or mental health information (with your consent)

  • Communications and correspondence with us

We collect this information when you:

  • Contact us by email, phone, or social media

  • Sign up for a newsletter, free resource, or waitlist

  • Attend a session, course, or event

  • Work with us commercially or professionally

How We Use Your Information

We use your data to:

  • Confirm and manage bookings or services

  • Communicate with you about sessions or relevant updates

  • Provide resources, newsletters, or information you’ve requested

  • Comply with legal or regulatory obligations

  • Improve our services and website experience

If you provide sensitive data (e.g. health information), we will always seek your explicit consent and treat this information with heightened care.

Legal Basis for Processing

We process personal data based on one or more of the following legal grounds:

  • Consent – you’ve given clear permission for us to process your data

  • Contract – processing is necessary for a contract with you

  • Legal obligation – we must comply with the law

  • Legitimate interests – we have a valid business reason, balanced against your rights

Special category (e.g. health) data will only be processed with your explicit consent or if required for therapeutic or legal purposes.

How We Store and Protect Your Data

Your data is stored securely using trusted digital tools and password-protected systems. Where paper notes are used, they are stored securely and separately.

We take reasonable steps to ensure your data is:

  • Not accessed unlawfully

  • Kept accurate and up to date

  • Retained only for as long as necessary (usually up to 7 years for therapeutic records, as required by UK industry standards)

We do not sell, rent, or share your personal information with third parties.

Email Communications & Marketing

You can opt in to receive emails such as newsletters or service updates. You may unsubscribe at any time by clicking the link in any email or by contacting us directly.

We aim to respect your preferences and only send communications that are relevant and helpful to your wellbeing journey.

Website Analytics

We may use tools such as Google Analytics to understand how users interact with our website. This helps us improve site content and user experience. Data collected is typically aggregated and anonymised, but may include:

  • Pages visited and time spent

  • Clicks, scrolls, and interactions

  • Device or browser type

  • General location (based on IP)

This data is used strictly for analytical purposes and is not used to identify individuals.

Third-Party Links

Our website may contain links to other websites. Once you leave our site, we cannot be responsible for the privacy policies or content of external websites. Please review their policies before submitting any personal data.

Your Rights

Under UK GDPR, you have rights including:

  • The right to access your data

  • The right to rectify incorrect or outdated data

  • The right to request deletion (where appropriate)

  • The right to restrict or object to processing

  • The right to data portability

To exercise any of these rights, please contact sarahwebberwellbeing@gmail.com.

Changes to This Policy

Any future changes to this privacy policy will be posted on our website. Where appropriate, you’ll be notified by email. Please check back occasionally for updates.