Privacy & Data Protection Policy

The information we entrust to care

To provide an intentional and personalised therapeutic experience, we collect information across three categories:

• Personal data. When you initiate an enquiry or complete our contact forms, we collect your name, email address, and telephone number so we may welcome you warmly.
• Special category data. Because we offer professional counselling, any health, wellness, or emotional details you choose to share in an enquiry or message are classified as sensitive health data. We process this with the highest degree of clinical confidentiality.
• Technical & minimalist interactions. To ensure our digital home remains fast, accessible, and elegant, we automatically collect basic technical data (such as your anonymised IP address, browser type, and page interactions) protected by our spam-prevention systems.

Our legal grounding for processing

Under the UK GDPR, we only look after your information when we have a clear, lawful reason to do so:

• Explicit consent. By submitting our contact form and choosing to share your wellness details, you grant us explicit consent to process your sensitive data solely to respond to your enquiry.
• Contractual necessity. Should you step into therapy with us, we process your personal details to fulfil our therapeutic agreement and manage your upcoming sessions.
• Clinical duty & legal obligation. On rare occasions, we may retain or process data to comply with professional ethical frameworks (such as the BACP) or legal, financial, and regulatory requirements.

Safeguarding & sharing your data

Your privacy is sacred to us. We never sell, rent, or commercialise your personal or health data. We share your data only with trusted, secure technical partners who help keep Serenova running seamlessly:

• Formspree & Netlify. For secure form delivery and premium, secure website hosting.
• Cloudflare Turnstile. To protect our site from digital disruption without compromising your user experience.

We retain your personal data only as long as necessary to uphold excellent clinical care, professional insurance standards, tax reporting, or legal obligations.

Your rights

You retain complete ownership over your digital footprint. Under UK data protection laws, you have the following rights:

• Access & rectification. You may request a copy of the personal data we hold about you, or ask us to correct inaccurate information at any time.
• Erasure & restriction. You can request that we delete your personal data or restrict its processing, subject to our clinical and legal retention obligations.
• Data portability & objection. You have the right to object to how we process your data, or request its transfer.