Privacy Policy

Last Updated: 12 July 2026

Angela Ross, trading as Mindful Wellbeing, is committed to protecting your privacy and handling your personal information with care, transparency and respect.

This Privacy Policy explains how I collect, use, store and protect your personal information when you visit my website, contact me, or use my professional services, including counselling, neurodiversity coaching, mindfulness, yoga and online courses.

I process your personal information in accordance with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018 and my professional obligations as a Registered Member of the British Association for Counselling and Psychotherapy (BACP).

1. Data Controller

The Data Controller responsible for your personal information is:

Angela Ross
Trading as Mindful Wellbeing

Office 10
335 Red Bank Road
Bispham
Blackpool
FY2 0HJ

Email: angela@mindfulwellbeing.co.uk

Website: www.mindfulwellbeing.co.uk

BACP Registered Member: 417344

ICO Registration Number: ZB966981

2. The Information I Collect

Depending on how you use my services, I may collect:

  • Your name

  • Postal address

  • Email address

  • Telephone number

  • Date of birth

  • Emergency contact details

  • Appointment information

  • Payment records

  • Information you provide through enquiries or contact forms

  • Health and wellbeing information relevant to counselling or coaching

  • Session notes

  • Communications by email or text

  • Website usage information through cookies and Squarespace analytics

I only collect information that is necessary to provide my services safely and effectively.

3. Special Category Data

As part of providing counselling and neurodiversity coaching, I may collect information about your physical or mental health.

This is known as Special Category Data under UK GDPR.

This information is handled with the highest level of confidentiality and is only collected where necessary to provide appropriate professional support.

4. How I Use Your Information

I use your personal information to:

  • Respond to enquiries

  • Arrange appointments

  • Provide counselling, coaching, yoga and mindfulness services

  • Deliver online courses and workshops

  • Maintain accurate client records

  • Process payments

  • Meet my professional, ethical and legal responsibilities

  • Improve my website and services

I will never sell your personal information.

5. Lawful Basis for Processing

I process your information under one or more of the following lawful bases:

  • Consent

  • Contract

  • Legal obligation

  • Legitimate interests

Where Special Category Data is processed, this is done because it is necessary for the provision of health and therapeutic services and in accordance with UK GDPR.

6. Confidentiality

Everything discussed during counselling is treated as confidential.

There are, however, circumstances where confidentiality may need to be broken. These include situations where:

  • there is a serious risk of harm to yourself or another person

  • there are safeguarding concerns involving a child or vulnerable adult

  • disclosure is required by law

  • disclosure is ordered by a court

Where possible, I will discuss this with you before sharing information.

7. Counselling Records

If you attend counselling, I keep brief professional notes to support our therapeutic work together.

These notes are:

  • stored securely within Zanda

  • password protected

  • encrypted where appropriate

  • accessible only by me

As part of my professional responsibilities, I receive regular clinical supervision. Client identities are never disclosed during supervision.

8. How Long Information is Kept

Records are only kept for as long as necessary.

Typical retention periods are:

  • Counselling records – 6 years after therapy ends

  • Financial records – 6 years in accordance with HMRC requirements

  • General enquiries that do not become clients – normally 12 months

  • Course booking records – retained only as long as necessary

Where clients were under 18 when counselling ended, records may be retained until the age of 25 in line with professional guidance.

9. Third-Party Providers

To provide my services safely and efficiently, I use trusted third-party providers, including:

  • Squarespace – website hosting

  • Zanda – practice management and client records

  • Stripe – secure payment processing

  • Zoom – online counselling sessions

  • Google Workspace – email communication

These providers process personal information on my behalf and maintain their own privacy and security standards.

10. International Transfers

Some of the providers I use may store or process information outside the United Kingdom.

Where this occurs, appropriate safeguards are in place to protect your personal information in accordance with UK GDPR.

11. Data Security

I take appropriate technical and organisational measures to protect your personal information.

These include:

  • encrypted systems where appropriate

  • password-protected devices

  • secure cloud storage

  • two-factor authentication where available

  • secure practice management software

  • regular software updates

12. Payments

Payments are processed securely through Stripe.

I do not have access to your full payment card details, and these are not stored by Mindful Wellbeing.

13. Cookies

My website is hosted by Squarespace and uses cookies to ensure the website functions correctly and to help me understand how visitors use the site.

You can manage or disable cookies through your browser settings or via the cookie banner displayed when you visit my website.

14. Your Rights

Under UK GDPR you have the right to:

  • access your personal information

  • request correction of inaccurate information

  • request erasure where appropriate

  • restrict processing

  • object to processing

  • withdraw consent where consent is the lawful basis

  • request a copy of your information

Requests should be made by contacting me directly.

15. Complaints

If you have any concerns about how your personal information is handled, please contact me first so I have the opportunity to resolve the issue.

If you remain dissatisfied, you may contact:

Information Commissioner's Office

Website: https://ico.org.uk

Telephone: 0303 123 1113

16. Changes to this Policy

This Privacy Policy may be updated from time to time to reflect changes in legislation, technology or my professional practice.

The most recent version will always be available on my website.