Privacy policy

This website is operated by Billy Smith (“I”, “me”). I provide person centred therapy in Cornwall, outdoors, and online across the UK. If you have any questions about this privacy policy, you can contact me via the form on the Contact page.

• Information you choose to share — when you contact me via the form or by email.
• Basic contact details — name, email address, phone number (if provided).
• Message content — the information you write in your enquiry.
• Technical information — Squarespace may collect basic analytics such as IP address, device type and pages visited (see Cookies section below).

I do not collect unnecessary data and I do not use automated decision-making or profiling.

If you contact me about therapy, your message may naturally include information about your mental health or wellbeing. This is considered “special category data” under the UK GDPR.

I only process this information:

• with your explicit consent (by choosing to send the message), and
• for the purpose of responding to your enquiry and providing therapy if we work together.

I use your information to:

• respond to your enquiry
• arrange sessions or discuss availability
• share practical information you have asked for
• keep basic administrative records if you become a client

I do not use your information for marketing, newsletters or automated emails unless you explicitly opt in.

I process personal data under the following UK GDPR bases:

• Consent — when you choose to contact me via the form or by email.
• Legitimate interests — to respond to enquiries and provide a safe, professional service.
• Legal obligation — to comply with the law, including safeguarding or court orders.

- Website messages are delivered by email and stored in a secure email inbox. - If you become a therapy client, notes are kept separately and securely, in line with professional standards. - Therapy notes contain only what is necessary and are not stored on this website.

• Initial enquiries: kept for up to 3 months if you do not begin therapy.
• Client records: kept for up to 7 years after therapy ends (industry standard).
• Emails: kept only as long as needed for administrative purposes.

I do not sell or share your data with third parties for marketing. I will only share information if:

• you ask me to share it, or
• there is a serious and immediate risk to your life or someone else’s, or
• I am legally required to (e.g., court order or safeguarding concern).

This website is hosted on Squarespace, which uses limited cookies and analytics to ensure the site works correctly. These may collect anonymised information such as:

• device type
• browser type
• pages visited
• approximate location (based on IP)

I do not run advertising cookies or third-party tracking pixels.

You have the right to:

• access your personal data
• request corrections to inaccurate data
• request deletion of your data (where legally possible)
• object to or restrict certain forms of processing
• withdraw consent at any time

If you want to exercise any of these rights, please contact me through the contact page.

I take reasonable steps to protect your data, including device encryption, secure passwords, and limiting access to authorised devices only. No online system can be 100% secure, but I follow current professional guidance.

I may update this policy if legal requirements change. The most recent version will always be available on this page.