Legal
Privacy Policy
Last updated: March 2025. This policy explains how Vision Wellbeing collects, uses, and protects your personal data in line with UK GDPR and the Data Protection Act 2018.
Data controller
The data controller for this website is Jack Wells, trading as Vision Wellbeing, based in Edinburgh, Scotland. You can contact me about data protection matters at jack@visionwellbeing.co.uk.
What data I collect
I may collect the following types of personal data:
- Contact information (name, email address) when you send an enquiry
- Booking details (name, contact information, appointment times) when you book via Setmore
- Health information you share during the course of therapy, which is treated as special category data under UK GDPR
- Basic website analytics (pages visited, approximate location) if cookies are accepted
I do not collect data from visitors who simply browse this website without making contact.
How I use your data
Personal data is used only for the purposes for which it was provided:
- To respond to enquiries and arrange appointments
- To provide and maintain your therapy sessions
- To keep clinical records as required by professional guidelines
- To comply with legal obligations
I will never sell, rent, or share your data with third parties for marketing purposes.
Third-party services
Setmore is used to manage appointment bookings. When you book a session, your name and contact details are processed by Setmore in accordance with their privacy policy. Setmore is a US-based company and data transfers are covered by appropriate safeguards.
Google Fonts is used to load typography. Google may collect basic technical information (such as your IP address) when fonts are loaded. You can review Google's privacy policy on their website.
No other third-party tracking or advertising services are used on this website.
Cookies
This website uses minimal cookies. No advertising or tracking cookies are set. If analytics are enabled, a simple, privacy-respecting analytics tool may set a cookie to count page visits — this does not identify you personally.
You can control cookie settings through your browser. Most browsers allow you to refuse cookies or delete them after each session.
Data retention
Clinical records are retained for a minimum of 7 years following the end of treatment, in line with professional guidance from the BABCP and NHS Scotland standards. Contact enquiries that do not proceed to therapy are deleted within 12 months.
Booking data held by Setmore is subject to their own retention policies.
Your rights
Under UK GDPR, you have the following rights regarding your personal data:
- Right of access — you can request a copy of the personal data held about you
- Right to rectification — you can ask for inaccurate data to be corrected
- Right to erasure — in certain circumstances, you can request that your data be deleted
- Right to restrict processing — you can ask that processing be limited in certain circumstances
- Right to data portability — you can request your data in a portable format
- Right to object — you can object to processing based on legitimate interests
To exercise any of these rights, contact me at jack@visionwellbeing.co.uk. I will respond within one month.
If you are unhappy with how your data has been handled, you have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.
Confidentiality in therapy
All information shared during therapy sessions is treated as strictly confidential. I will not disclose information about you to third parties — including family members, employers, or GP — without your explicit consent, except in the following limited circumstances:
- Where there is a serious and immediate risk to your life or the life of others
- Where required by a court order
- In the context of clinical supervision (which is anonymised)
These limits to confidentiality are discussed at the start of therapy.