Privacy Policy

What Personal Data We Collect & Why

We may process personal data you provide by subscribing to a newsletter, submitting a contact form, or communicating via email, text or our website. We may also process data through cookies or tracking software — please refer to our Cookie Policy for details.

We may also receive personal data from third parties such as Facebook, Google, Stripe or other analytics, advertising or payment providers.

Personal Information

Name, date of birth, email address, phone number, correspondence address, IP address — processed for communication and record keeping on the lawful grounds of legitimate interest.

Client & Session Information

If you book and attend a therapy session with us, we will collect and process information relevant to your therapeutic care. This may include details about your physical or mental health, emotional history, trauma, and presenting concerns. This is special category health data under UK GDPR Article 9.

Health data is stored securely, accessed only by Bonnie Silverback, and is never shared with third parties except where required by law or where you have given explicit consent.

Customer & Payment Information

If you purchase services from us we may process billing address, payment details and purchase records on the lawful grounds of contract performance. Card payments are handled securely by Stripe and we do not store your card details.

Website & User Information

Browser information, page views and usage data — processed to analyse and monitor website usage, support administration and maintain security on legitimate interest grounds.

Promotional Information

If you sign up to receive newsletters or free resources, we will process your contact details to send you relevant content. This is done on the basis of your consent, which you may withdraw at any time by unsubscribing or contacting us directly.

Who We Share Your Data With

We may share your personal data with the following external service providers only where necessary to operate our business:

• Stripe — secure payment processing
• Google — analytics and email (Gmail)
• Facebook / Meta — social media and advertising
• Zoom — online session delivery
• WhatsApp (Meta) — client communication where agreed
• Squarespace — website hosting and booking system

We may also share data where required by law, regulation, or legal proceedings, or in connection with the sale or transfer of our business.

We will never share your personal data with any third party for their own marketing purposes without your explicit consent.

Please note: if you communicate with us via WhatsApp, please be aware that messages are transmitted via Meta's servers. If you have concerns about sensitive communications, please contact us by email instead.

Transfer of Personal Data

Our website is located within the United Kingdom and your data will be processed in the United Kingdom. We do not transfer your personal data outside of the UK or EEA. Where third-party providers process data outside the UK, we ensure appropriate safeguards are in place in accordance with UK GDPR.

Data Security

We take the protection of your personal data seriously and have taken suitable and reasonable steps to protect it from misuse, loss, unauthorised access and any modification or disclosure.

Access to your personal data is limited to Bonnie Silverback, who is bound to keep it confidential. Please note that while we take steps to secure data transmitted via the internet, there are inherent risks in doing so. If you prefer to communicate via an alternative method please contact us to arrange this.

Data Retention

We will not keep your personal data for longer than is required for the purpose for which it was collected, including any legal or record keeping requirements. Therapy session records will be retained for a minimum of 7 years from the date of the last session in accordance with professional practice guidance, after which they will be securely destroyed.

We will take reasonable steps to destroy or permanently de-identify all other data when it is no longer needed.

Your Rights

Under UK GDPR you have the following rights in relation to your personal data:

• The right to access a copy of the data we hold about you
• The right to correct inaccurate or incomplete data
• The right to erasure ('the right to be forgotten') in certain circumstances
• The right to restrict or object to processing
• The right to data portability
• The right to withdraw consent at any time (where processing is based on consent)

To exercise any of these rights please contact us at bonniethechangemaker@gmail.com. We will respond within one month.

For more information on your rights visit ico.org.uk/your-data-matters.

If you are not satisfied with how we handle your data you have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.

Cookies

We use cookies and similar tracking technologies on our website. For full details of the cookies we use and how to manage your preferences, please see our Cookie Policy.

Links to Other Sites

Our website may contain links to other websites. We are not responsible for the privacy practices of those websites and recommend you review their privacy policies before disclosing any personal information.

Changes to This Notice

We reserve the right to alter or amend this Privacy Notice at any time. Any changes will be posted on this page with an updated date. Your continued use of the website after any amendments constitutes acceptance of those changes. We recommend you review this Notice regularly.