Shirley Appleby Ltd takes your privacy seriously. We only process personal and sensitive data that is relevant and specific to the service being provided, whether that’s holistic wellbeing support, coaching, training, assessments, or content delivery. We are committed to protecting your privacy and upholding your rights under UK data protection law.

Data Controller

Under the UK General Data Protection Regulation (UK GDPR), the data controller is:
Shirley Appleby Ltd
Company No: 04818695
ICO Registration No: Z2034164
Registered Address: 158 High Street, Herne Bay, England, CT6 5NW

Scope of This Policy

This privacy policy explains how we collect, use, store, and protect your data when you use our services or visit our website. It applies only to www.shirleyappleby.co.uk. If you follow links to external websites, please check their own privacy policies.

What Information We Collect

We may collect and process the following information:

Personal data you submit through our website (e.g., name, email, phone number).

Information shared during email, phone, or form correspondence.

Information related to services requested, including wellbeing or assistive needs assessments.

Website usage data such as traffic, browser type, location, and access patterns.

How Your Data Is Stored

We take appropriate measures to keep your data secure and confidential. This includes:

Storing contact details on a passcode-protected mobile phone.

Using password-protected, encrypted email and secure online storage.

Locking paper records in a filing cabinet. Paper notes are digitised and then securely shredded.

Data not required after initial contact will be deleted within 30 days.

Session tools (e.g., Zoom, Google Meet, WhatsApp) are GDPR-compliant and encrypted.

Please note: While we do our best to protect your information, the transmission of data via the internet is never completely secure. Any data shared online is at your own risk.

How Your Information Is Used

We use your data to:

Deliver services you’ve requested

Communicate service updates or changes

Respond to enquiries

Maintain records and accounting

Promote services (only if you’ve consented)

We never sell, rent, or trade your data to third parties.

When Data May Be Shared

We may share your data:

With your consent, for coordinated care (e.g., with other professionals or agencies).

With clinical supervisors to ensure the quality and safety of services, these discussions are anonymised and confidential.

When legally required or to protect you or others from serious harm.

With organisations for fraud protection or legal compliance.

Your Rights

You have the right to:

Request access to your data

Request correction or deletion (see retention limits below)

Withdraw consent at any time (processing before withdrawal remains lawful)

We retain client records for 7 years after the final session (or until age 25 for clients under 18), as required by insurance and legal standards. This legal obligation overrides the right to erasure during this period.

Access Requests

To request a copy of your personal data, email [email protected]. We aim to respond within 30 days. A small administrative fee (£10) may apply.

Policy Updates

We may occasionally update this policy. Changes will be published on this page and, where appropriate, notified by email. Please revisit this page periodically to stay informed.

Contact Us

For questions about this policy or how we handle your data, please contact:
[email protected]