1. Introduction

Flourish Counselling is committed to protecting the privacy and security of your personal data. This Privacy Policy explains how we use any personal information we collect about you when you use our website, specifically when you contact us for services. We are required to comply with the UK General Data Protection Regulation (UK GDPR).

2. Who We Are (Data Controller)

• Website: https://flourishcounselling.uk
• Contact for Privacy Questions: The Data Controller for your personal data is Flourish Counselling. If you have any questions about this privacy policy, including any requests to exercise your legal rights, please contact us at: info@flourishcounselling.uk.

3. The Data We Collect About You

We may collect and process the following categories of personal data via the “Contact Us” form on our website:

Category of Data	Specific Data Collected
Contact Data	Name, Email Address, Phone Number.
Sensitive Personal Data (Special Category Data)	Personal issues/health information that you voluntarily choose to disclose in the comment field of the form.

We require this information to respond to your request for counselling services.

4. How We Collect and Use Your Data (Purpose)

A. Method of Collection

We only collect your personal data directly from you when you voluntarily submit it through our “Contact Us” form.

B. Purpose of Use

The primary purpose for collecting this information is:

• To call you back and discuss your inquiry, arrange an initial consultation, or provide you with the information you requested about our counselling services.

5. The Lawful Basis for Processing (UK GDPR)

We are required to have a lawful basis to process your personal data under UK GDPR.

Type of Data	Lawful Basis for Processing
Contact Data (Name, Email, Phone)	Legitimate Interest (Responding to your direct service inquiry) or Steps taken to enter into a contract.
Sensitive Personal Data (Personal Issues/Health)	Explicit Consent (Provided by you when you submit the health information voluntarily) and Provision of Health/Social Care.

6. Data Sharing and Third Parties

We want to be clear that:

• We do not share your personal data collected via the “Contact Us” form with any third parties for marketing, advertising, or any other purpose.
• Your data is handled only by Flourish Counselling staff for the purpose of responding to your inquiry.

7. Data Security and Storage

• Security Measures: We have implemented appropriate security measures to protect your personal data, including SSL (Secure Sockets Layer) and TLS (Transport Layer Security) encryption for data transmission.
• Data Location: Our servers are based in London, UK.
• Data Retention: We will only retain your personal data for as long as necessary. If your inquiry does not result in a formal counselling relationship, we will safely and securely delete or anonymise your contact and sensitive inquiry data within 1 year of the last communication. This period is chosen to ensure we can respond to any follow-up questions and manage our service inquiries effectively.

8. Your Legal Rights (UK GDPR)

Under UK GDPR, you have the following rights regarding your personal data:

1. Request access to your personal data.
2. Request correction of the data we hold about you.
3. Request erasure of your personal data (The right to be forgotten).
4. Object to processing of your personal data.
5. Request restriction of processing of your personal data.
6. Request the transfer of your personal data to another party.
7. Right to withdraw consent at any time where we are relying on consent to process your personal data.

If you wish to exercise any of these rights, please contact us at info@flourishcounselling.uk. legal, or security purposes.