Privacy policy.

Last updated: 9 July 2026

Who I Am

I am Suzie Carr, a self-employed counsellor trading as Suzie Carr Counselling Bristol ("I", "me"). I am the Data Controller responsible for your personal data.

As a sole practitioner, I am not required to appoint a Data Protection Officer.

By visiting www.suziecarr.com or using my counselling services, you are accepting the practices described in this policy.

What Information I Collect

I may collect and process:

  • Your name

  • Email address

  • Telephone number

  • Information you provide when making an enquiry

  • Information relevant to counselling sessions

  • Counselling notes and clinical records

How Your Information Is Collected

I collect information when you:

  • Contact me by email or telephone

  • Submit an enquiry via the website contact form

  • Engage in counselling sessions

  • Provide information during our work together

Why I Collect Your Information

I use personal information to:

  • Respond to enquiries

  • Arrange and provide counselling services

  • Maintain clinical and professional records

  • Meet legal, ethical, insurance and professional obligations

  • Safeguard clients and others where necessary

Lawful Basis for Processing

I process personal data under UK GDPR on the basis of:

  • Steps taken prior to entering into a counselling agreement

  • Performance of a counselling contract

  • Legal obligations

  • Legitimate interests in operating a safe counselling practice

Health-related information is treated as special category data and processed in accordance with UK GDPR and relevant professional requirements.

How Long I Keep Information

  • Contact and administrative information is kept only for as long as necessary to manage the counselling relationship. Once counselling ends and contact is no longer required, this information is securely deleted.

  • Clinical notes and counselling records are retained for 7 years after the end of counselling, in line with professional and insurance requirements, and then securely destroyed.

Who Information Is Shared With

I do not sell or share your personal data for marketing purposes.

Some limited data is processed by trusted service providers who support my practice, including:

  • Squarespace (website hosting and contact form services) — processes data submitted through the website contact form and hosts website-related data

  • Squarespace (email services linked to the website domain) — provides email hosting and delivery services

These providers only process data as necessary to deliver their services and are required to handle personal data securely and in compliance with data protection law.

Information may also be shared where:

  • You have given explicit consent

  • I am legally required to do so

  • There is a safeguarding concern involving serious risk of harm

  • Disclosure is required by a court or legal authority

Confidentiality

All counselling information is treated as confidential. Confidentiality may only be broken where:

  • There is a serious risk of harm to you or others

  • There is a legal obligation to disclose information

  • Safeguarding concerns arise

  • Disclosure is required by law or a court order

Where possible, I will discuss any disclosure with you first.

Automated Decision-Making

I do not make decisions about clients solely by automated means. All decisions involve professional judgement.

Security

Appropriate technical and organisational measures are used to protect personal data from loss, misuse, unauthorised access or disclosure.

Your Rights

Under UK GDPR, you have the right to:

  • Access the personal data I hold about you (I can arrange for this to be viewed during a session)

  • Correct inaccurate data

  • Request deletion of data, where applicable — I will retain only what I have a legal obligation to keep (for example, for tax purposes)

  • Restrict or object to processing in certain circumstances

  • Request data portability where applicable

Please note: if you ask for all data to be deleted while we are still working together, I may not be able to continue offering you a service.

Requests will be handled in line with legal and professional obligations.

Analytics

This website collects data to power website analytics, including:

  • Information about your browser, network, and device

  • Web pages you visited prior to arriving at this website

  • Your IP address

  • Clicks, internal links, pages visited, scrolling, searches, and timestamps

This information is shared with Squarespace, my website hosting and analytics provider, to understand site traffic and activity.

Cookies

This website uses cookies and similar technologies — small files or pieces of text downloaded to your device when you visit. For details on the cookies used, see Squarespace's cookie information.

Data Protection Concerns

If you have concerns about how I handle your data, please contact me, Suzie Carr, Data Controller, in the first instance.

If your complaint is not resolved to your satisfaction, you can contact the Information Commissioner's Office (ICO):https://ico.org.uk or 0303 123 1113.

Changes to This Policy

I may update this policy from time to time. Please check this page periodically. Material changes will, where appropriate, be notified to you by email.