Privacy policy.

Your privacy matters. This policy explains how personal information is collected, used, and protected when you visit this website or contact me.

I aim to handle your information with care, transparency, and respect at all times.


Who I am

This website is operated by Charlotte Perry (she/her), trading as Reflectful Counselling.

I am registered with the Information Commissioner’s Office (ICO) as a data controller.
ICO registration number: ZC067648.

If you have any questions about this policy or how your information is used, you’re welcome to contact me at: hello@reflectful.uk


What information I collect

I may collect personal information when you:

  • complete the contact form on this website

  • contact me by email

  • enquire about counselling sessions

This may include your name, email address, and any information you choose to share in your message.

I only collect information that is necessary to respond to your enquiry.


How your information is used

Your information is used to:

  • respond to enquiries

  • communicate with you about counselling

  • arrange an initial conversation or appointment

I do not use your information for marketing purposes, and I do not sell or share your information with third parties.


Lawful basis for processing your information

Under UK data protection law, the lawful basis for processing your personal information is usually legitimate interest, as this enables me to respond to enquiries and provide counselling services, alongside consent where appropriate.

As part of counselling work, I also process special category data under Article 9 of the UK GDPR. This includes health and mental health information shared within therapy.

The lawful basis for processing this information is:

  • Article 9(2)(h) - processing necessary for the provision of health or social care, and

  • Your explicit consent, which is discussed and agreed as part of our therapeutic work.

I only collect and process information that is relevant and necessary for the support I provide.

Third-party data processors

I use a small number of trusted third-party services to support the safe and effective running of my practice. These may include website hosting, secure email and cloud storage, online scheduling, video-conferencing, practice management, and payment processing services. These services process personal data on my behalf and are required to comply with UK data protection law

These may include:

  • website hosting and analytics services

  • secure email and cloud storage providers

  • online scheduling or enquiry systems

  • practice management software

  • payment processing services

I only use services that have appropriate data protection safeguards in place, and I do not allow your information to be used for marketing purposes by third parties.

Further details can be provided on request.

Confidentiality and counselling

Counselling is a confidential space. Any personal information you share as part of therapy is treated with care and held in line with professional and ethical standards.

There are a small number of legal and ethical limits to confidentiality, which I will explain clearly at the start of our work together.

If you have questions about confidentiality at any point, you are always welcome to ask.

How long your information is kept

I keep personal information only for as long as necessary and in line with professional, legal, and insurance requirements.

In general:

  • counselling records are kept for seven years after our work ends

  • enquiry records where counselling does not proceed are kept for up to twelve months

  • financial records are kept for six years in line with HMRC requirements

After these periods, information is securely deleted or destroyed.


Cookies and website analytics

This website is built using Squarespace, which may use essential cookies and basic analytics to help the site function properly and to understand how visitors use the site (for example, which pages are visited).

This information does not personally identify you and is used only to improve the website.

I do not use advertising cookies or third-party tracking for marketing purposes.



Your rights

Under UK data protection law, you have the right to:

  • ask what personal information I hold about you

  • request access to your personal data

  • request corrections to inaccurate or incomplete information

  • ask for your information to be deleted, where appropriate

  • raise concerns about how your data is handled

  • request that your personal data be provided to you in a structured, commonly used format, so that it can be shared with another service provider (this is known as the right to data portability)

If you would like to exercise any of these rights, you are very welcome to contact me and I will respond in line with legal requirements.

If you have concerns about how your personal information is handled and feel unable to resolve these directly with me, you also have the right to raise a complaint with the Information Commissioner’s Office (ICO), the UK’s independent authority for data protection.

You can find further information at: https://www.ico.org.uk


Changes to this policy

This policy may be updated from time to time to reflect changes in practice or legal requirements.

The most recent version will always be available on this page.

If you have any questions about this privacy policy or how your information is handled, please feel free to get in touch.




Issue Date: December 2025