Privacy Policy
Version: June 2026
1. Introduction
This Privacy Policy explains how Innerworth Counselling Ltd collects and uses personal information when you visit our website, make an enquiry, book or receive counselling, make payment, contact us, or subscribe to marketing.
2. Data controller and contact details
Innerworth Counselling Ltd is the data controller. Address:
Fellowship House,
49 Southmoor Rd,
Hemsworth,
Pontefract WF9 4LX
Email: info@innerworthcounselling.com
ICO registration reference: ZC090968.
3. Personal data we collect
We may collect:
- identity and contact details;
- enquiry and correspondence information;
- appointment, payment and invoice information;
- emergency-contact details;
- health, wellbeing, risk and safeguarding information;
- brief clinical records;
- website/device, IP, cookie and analytics data;
- and marketing preferences.
No personal data is stored on this website.
4. Why we use data and lawful bases
We use enquiry data to respond to you: legitimate interests and steps at your request before a contract. We use appointment, service and payment data to provide and administer therapy: contract and legitimate interests. We use invoices and tax records: legal obligation. We use clinical, health, risk and safeguarding information: legitimate interests and, for special-category data, provision of health or social care, explicit consent where required, and/or substantial public interest or safeguarding as applicable. We use marketing data and non-essential cookies only with consent where required.
5. Special-category data
Counselling may involve health and wellbeing information. We collect only what is necessary and apply additional safeguards. You may withdraw consent where consent is the basis; this does not affect processing already undertaken or processing required on another lawful basis.
6. Sharing data
We do not sell personal data. We may share data with carefully selected processors such as GoDaddy website hosting, email, cloud storage, booking, video-call, payment, accounting and IT providers; with professional supervisors using anonymised information where possible; and with insurers, regulators, professional advisers, police, emergency services, GPs, mental-health teams or safeguarding authorities where necessary or legally required.
7. International transfers
Some providers may process data outside the UK. Where this happens, we will use an adequacy regulation, UK International Data Transfer Agreement/Addendum, or another lawful safeguard. The developer must confirm actual providers and safeguards before launch.
8. Retention
We retain data only as long as necessary. Unsuccessful enquiries: 12 months. Client clinical records, consent forms and risk records: 7 years after therapy ends. Financial records: 6 years plus the current financial year. Complaints and safeguarding records: 7 years or longer where required. Marketing data: until consent is withdrawn or inactivity review. Cookie-consent records: 12 months. Retention may be extended for legal claims, safeguarding, insurance or regulatory reasons.
9. Your rights
You may request access, correction, erasure, restriction, objection, portability, and withdrawal of consent where applicable. Email innerworthcounselling@gmail.com. We normally respond within one month and may verify identity. You may complain to the Information Commissioner’s Office.
10. Automated decision-making
We do not use automated decision-making or profiling that produces legal or similarly significant effects.
11. Children
Our standard service is for adults. Where we receive an enquiry about a child or young person, we process information only as necessary to respond, assess suitability and meet safeguarding duties. Appropriate parental responsibility and consent will be obtained before services are provided.
12. Security and breaches
We use reasonable organisational and technical safeguards. We maintain an internal breach process and will assess, document and notify relevant breaches to the ICO and affected individuals where legally required.
13. Changes
We may update this policy. The current version will appear on the website.