PRIVACY POLICY

Last updated: June 2026

Your privacy is extremely important to me. This notice explains how I collect, use, store and protect your personal information when you visit my website or work with me therapeutically. I comply with the UK GDPR, the Data Protection Act 2018, the Data (Use and Access) Act 2025, and the Privacy and Electronic Communications Regulations (PECR).

I am the data controller for Inspiring Changes.

Name: Nicolette Pinkney

Address: 1 The Banks, Grimstead Road, Whaddon, Wiltshire, SP5 3EE

ICO Registration: ZA374765

Email: admin@inspiringchanges.co.uk

Phone: 01722 238395

1. What information I collect

When you contact me

Your name
Contact details
A brief summary of what you would like help with

During therapy

Personal details (name, address, contact information)
Session notes
Relevant background information you choose to share

Website visitors

My website is hosted on Wix, which collects standard log data such as:

IP address
Browser type
Pages visited
Cookie preferences

This information does not identify you personally.

If you complete a contact form, the information is temporarily stored on Wix’s secure servers before being emailed to me.

2. Lawful bases for processing

Enquiries and current clients

Contract: to provide therapy services
Legitimate interests: to respond to your enquiry

Special category data

I process health‑related information under:

UK GDPR Article 9(2)(h) – necessary for the provision of health treatment

3. Confidentiality

Everything you share with me is confidential. I will only break confidentiality if:

You or someone else is at risk of serious harm
I am required to do so by law
Information is requested by a court
You give explicit consent

Where possible, I will discuss this with you first unless safeguarding prevents it.

4. How long I keep your information

Enquiry data: deleted after 3 months if you do not begin therapy
Session notes: kept for 7 years after therapy ends
Emails/text messages: deleted within 3 months unless clinically relevant
Website form submissions: deleted once transferred to my secure system

All records are then securely destroyed.

5. How your information is stored

I take data security seriously. I use:

Encrypted laptop and tablet
Password‑protected files
Locked filing cabinet for paper notes
Two‑factor authentication on email accounts
Secure, GDPR‑compliant cloud storage

6. Sharing your information

I do not share your information with third parties except:

My professional supervisor (anonymised)
Where required by law
Payment processors (e.g., Sum Up, Zettle, PayPal)
Email service providers (e.g. Hostinger)
Website hosting and analytics providers (Wix)

All third parties are GDPR‑compliant and only process data as instructed.

7. Your rights

You have the right to:

Access your personal data
Correct inaccurate information
Request deletion (in some circumstances)
Restrict or object to processing
Receive a copy of your data in a portable format

To make a request, email admin@inspiringchanges.co.uk.

8. Data‑protection complaints

If you believe your personal data has been mishandled, you can raise a complaint by emailing:

admin@inspiringchanges.co.uk

I will acknowledge your complaint within 30 days and respond as quickly as possible.

If you are not satisfied with my response, you can escalate your complaint to the Information Commissioner’s Office (ICO):

https://ico.org.uk/make-a-complaint

9. Cookies and website analytics

My website uses Usercentrics to manage cookie consent. You can view or change your cookie preferences at any time via the Cookie Settings link on this site.

You can read the Cookie Policy here:

10. Changes to this notice

This notice is reviewed regularly and updated when necessary. The latest version will always be available on this website.

PRIVACY POLICY

CONTACT ME