Website Privacy Policy

Effective Date: 1 October 2026  |  Last Reviewed: 22 October 2026

This Website Privacy Policy explains how Simon Vizard Counselling (“I”, “me”, or “my”) collects, uses, and safeguards personal information when you visit and browse www.simonvizard.co.uk (the “Site”).

I am committed to protecting your privacy in full compliance with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, and the Privacy and Electronic Communications Regulations (PECR).

1. Data Controller Information

For the purposes of UK data protection law, the Data Controller for this website is:

Simon Vizard
Registered Member MBACP (Registration No. 094892), Dip. Couns.
Simon Vizard Counselling
Wallis Gardens, River Meadow, Stanford in the Vale, Oxfordshire, SN7 8FZ
Telephone: 07519 411585
Email: [email protected]
Website: www.simonvizard.co.uk

2. What Information Is Collected

When you visit this website, information is collected in two ways:

2.1 Information You Choose to Provide
If you contact me by telephone, email, or through contact details provided on my Contact Page, I collect the personal details you provide. This typically includes your name, email address, phone number, and any preliminary details you choose to share regarding your enquiry. (Please avoid sharing sensitive clinical details via initial email or unencrypted messages).

2.2 Technical & Device Information
When you view pages on this Site, standard technical data is automatically logged by the hosting server. This includes your IP address, browser type and version, device type, operating system, referring URL, pages viewed, and timestamps. This data is aggregated and used exclusively for system security, performance monitoring, and server diagnostics.

3. How Your Information Is Used & Lawful Basis

Under Article 6 of the UK GDPR, I only process your personal data where there is a valid lawful basis:

1. Responding to Enquiries: To reply to your enquiry and discuss your counselling requirements. (Lawful basis: Legitimate Interests and taking steps at your request prior to entering into a therapy agreement).
2. Site Security & Fraud Prevention: To monitor and protect the server against cyber threats, unauthorized access, and malicious attacks. (Lawful basis: Legal Obligation and Legitimate Interests).
3. Site Performance & Accessibility: To ensure pages load efficiently, work across mobile devices, and display correctly. (Lawful basis: Legitimate Interests).

I never sell, rent, or trade your personal information to third parties, nor do I use your details for marketing or commercial advertising.

4. Cookies & Tracking Technologies (PECR Compliance)

Under the Privacy and Electronic Communications Regulations (PECR) and ICO guidance, websites must inform visitors about the cookies they use.

4.1 Essential Cookies Only:
This website is deliberately built with minimal tracking footprint. It uses strictly necessary session and security cookies (such as Cloudflare security tokens and essential WordPress core navigation cookies) that are technically required to deliver a secure, fast, and stable web browsing session.

4.2 No Marketing or Profiling Cookies:
This Site does not use third-party marketing cookies, Google advertising pixels, Meta pixels, or behavioral profiling trackers. Because only essential technical cookies are deployed, intrusive consent banners that block content are neither required under PECR Regulation 6 nor necessary for your privacy.

4.3 Managing Cookies in Your Browser:
You can configure your browser to block or alert you about cookies, or delete existing cookies. To manage cookies in your browser, refer to your browser’s help documentation or visit www.allaboutcookies.org.

5. Third-Party Services & External Links

This Site may contain links to professional directories (such as the BACP) or social media profiles. If you click on an external link, you will leave this website. External sites operate under their own independent privacy notices, which I encourage you to review.

6. Data Retention & Disposal

Personal data is retained only for as long as necessary to fulfill the purpose for which it was collected:

• General Website Enquiries: If you contact me with an initial enquiry but do not proceed with counselling, your contact details and message are deleted from email and phone records after 12 months (or sooner upon your request).
• Web Server Log Files: Automatically purged after 30 days.
• Counselling Clients: If you enter into therapy, your clinical records are governed by statutory retention schedules (see Section 11 of the Client Privacy Notice).

7. Your Statutory Rights (UK GDPR)

Under the UK GDPR, you have the right to:

1. Access: Request a copy of any personal data I hold about you.
2. Rectification: Request correction of any inaccurate or incomplete personal information.
3. Erasure: Request that your personal information be deleted where there is no overriding legal reason to maintain it.
4. Restriction: Request that the processing of your data be restricted in certain circumstances.
5. Object: Object to processing carried out under the basis of legitimate interests.

To exercise any of these rights, please contact me directly using the contact details in Section 1. I will respond promptly and within one calendar month.

8. Data Security Measures

I take the security of your information seriously and implement appropriate technical and organisational safeguards:

• HTTPS Encryption: All data transmitted between your browser and this Site is encrypted using Transport Layer Security (TLS 1.3 / SSL).
• Restricted Access: Administrative systems, email accounts, and devices are protected by strong passwords, encryption, and biometric PIN security.
• UK/EEA Hosting: The Site is hosted on secure server infrastructure located within the UK and European Economic Area.

9. How to Contact Me or Lodge a Complaint (ICO)

If you have any questions or concerns regarding how your personal information is handled, please contact me first so I can resolve the issue with you directly.

You also have the statutory right to raise a concern or lodge a formal complaint with the UK data protection supervisory authority:

Information Commissioner’s Office (ICO)
Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF
Telephone Helpline: 0303 123 1113
Website: ico.org.uk/make-a-complaint

10. Changes to This Policy

This policy is reviewed annually to ensure ongoing compliance with UK data protection legislation and professional standards. Any revisions will be published on this page with an updated review date.