Privacy Policy

General Data Protection Regulation Privacy Policy V2.0

Last Updated : 30 July 2026

Information Collected on this Website:

No information of your visit is directly collected by healingfieldsawuku.com. We have not set up any plugins that deliberately look for any other metrics. However, Internet Protocol (IP) address, web browser type, cookies, the date and time of your visit, may be recorded by the Hosting Site.

Introduction:

In using this service we are committed to protecting your personal information and ensuring that it is processed in accordance with the General Data Protection Regulation (GDPR). This policy outlines how we collect, use, disclose, store, and secure your data. No information will be disclosed to any third party unless you have explicitly requested it or it is appropriate to do so.

Used Terms:

www.healingfieldsawuku.com (also may referred as: “we”, “us”, “Service”, “our site”, “our website”, “this website, The Healing Fields”) Personally identifying information (also referred as: “PII”. may include, but not limited to: Name, Email,) Terms of Use (also may be referred as: “Terms”, “Terms and Conditions”, “TOC” )

Lawful Basis for Processing

We process your personal data under**Article 6(1)(b) of the UK GDPR** (“necessary for the performance of a contract”) for delivering therapeutic counselling services. Special category data (health information) is processed under **Article 9(2)(h)** (“provision of health or social care treatment”) 

Legitimate Interests Assessment

Where we rely on legitimate interests (Article 6(1)(f)), these are limited to administrative record-keeping required by our professional indemnity insurers and BACP accreditation standards.

Who we are:

**Website:** https://www.healingfieldsawuku.com/
**Location:** United Kingdom

Collection of Initial Information:

We may collect certain personal information from you such as name, phone number, email address, age, health status, and any other relevant information. We will retain submitted information for as long as is necessary to fulfill the enquiry.

Use of Personal Information:

We use your personal information to ensure that the level of therapeutic counselling meets your individual needs. This is solely for the purpose of understanding how we can support you during the therapeutic process or other related services.  Your data is not shared with any third party without your explicit consent unless required to do so under applicable law.

Disclosure of Personal Information:

In certain circumstances, we may be obliged to disclose personal information in order to comply with legal obligations such as responding to a court order or as stipulated in the counselling contract. We will only release the minimum amount of data necessary in order to comply with any legal obligations.

Storage and Security:

Your personal information is stored securely, and access to this information is restricted to authorized personnel only.

Data Retention Periods:

In accordance with BACP Ethical Framework guidance:

  • Counselling records are retained for a minimum of **7 years** from the date of last contact for adult clients
  • For children and young people, records are retained until the client reaches age **25** (or age **26** for those who were 17 at the end of therapy)

After this period, records are securely destroyed unless there are exceptional circumstances (e.g., ongoing safeguarding considerations).

International Data Transfers:

For online counselling sessions, video conferencing platforms may be used. The safest is determined based on security and privacy requirements at the time. The following platforms may be employed:

  • Infomaniak kMeet: Swiss-based; data remains within European Economic Area; GDPR-compliant
  • Doxy.me: (web browser) US-based; GDPR compliant

Clients are informed of the platform selected at the time of arranging online sessions. All platforms employed utilise end-to-end encryption.

Data Subject Rights:

You have various rights under GDPR such as access, rectification, erasure, restriction of processing, and objection. As a client or a past client within the data retention period, if you wish to exercise any of these rights do not hesitate to contact us. You have various rights under GDPR such as access, rectification, erasure, restriction of processing, and objection. As a client or a past client within the data retention period, if you wish to exercise any of these rights do not hesitate to contact us.

**Contact Method:** Details provided on the About page and Contact page of this website.

Automated Decision-Making and Profiling:

We do not use automated decision-making, profiling, or algorithms to analyse client data. All therapeutic work involves Professional discretion and direct practitioner-client interaction.

Right to Complain to the ICO:

If you are concerned about how we have handled your personal data, you have the right to lodge a complaint with the Information Commissioner’s Office (ICO). Visit https://ico.org.uk/concerns/ or call 0303 123 1113.

**Important:** I encourage you to contact me first to resolve your concern before contacting the ICO. I commit to acknowledging all written complaints within 30 calendar days.

Data Protection Complaints Procedure (Data (Use and Access) Act 2025 Requirement)

Under the Data (Use and Access) Act 2025, you have the statutory right to make a data protection complaint directly to me as your data controller.

How to Raise a Concern:

1.I encourage you to contact me first to resolve your concern before contacting the ICO. Submit your complaint by email.

2. Include your name, contact details, description of the concern, and any relevant correspondence references.

3. Submit within 12 months of becoming aware of the issue.

Acknowledgment:

I will acknowledge receipt of your complaint within **30 calendar days** and provide a substantive response within 3 months of acknowledgment, unless the matter is unusually complex.

Escalation:

If you remain dissatisfied after my response, you may escalate your complaint to the Information Commissioner’s Office (ICO) at https://ico.org.uk/concerns/

Changes to Privacy Policy:

We reserve the right to update this privacy policy from time to time as necessary to reflect changes in our practices, services, and the ethical frameworks we subscribe to. You are encouraged to review it periodically for any updates or modifications that may affect your rights under GDPR.

Children and young people:

This service is not directly aimed at children and young people. Enquiries from individuals under 18 years of age will be referred on unless:

  • The under-age child has express permission from a parent/guardian with Power of Attorney, **OR**
  • The young person demonstrates Gillick competence (as outlined in https://childethics.com/glossary/gillick-competence/)

Where Gillick competence is established, the young person may consent independently without parental involvement.