Privacy Policy

Last updated: May 2026
Applies to: www.sheilablamire.com and all associated services
Regulatory framework: UK General Data Protection Regulation (UK GDPR) & Data Protection Act 2018

1. Introduction

This Privacy Policy explains how personal data is collected, used, stored, and protected in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. It applies to all clients, prospective clients, and website visitors who engage with my services or contact me through this website.

I am committed to maintaining the confidentiality and security of all information shared with me. This policy outlines the types of data I collect, why I collect it, how it is used, and the rights you have regarding your personal information.

2. Data Controller

I act as the Data Controller for all personal data processed in connection with my services. This means I am responsible for deciding how and why your personal data is used.

Contact details:

Name: Sheila Blamire
Email: sheila@sheilablamire.com
Address: Details provided on request for privacy and security reasons
Telephone: 07724 750071

3. Personal Data I Collect

To provide my services effectively, I may collect and process the following categories of personal data:

Identity information: name, title
Contact information: telephone number, email address, postal address
Enquiry information: messages sent via the website contact form, including preferred session type, format, and requested dates
Session information: notes taken during sessions, details you choose to share, and any relevant background information
Administrative information: appointment history, communication records

All information shared with me is treated as confidential.

4. How Your Data Is Collected

Your personal data is collected through:

The website contact and booking form at www.sheilablamire.com/contact
Direct communication by phone, email, or in person
Notes taken during sessions
Any other forms or documents you complete in connection with my services

I do not collect data from third parties unless you explicitly request or authorise it.

For information about how this website uses cookies and technical data, please see my Cookie Policy.

5. Legal Basis for Processing

I process your personal data under the following lawful bases as defined by UK GDPR Article 6:

Contract (Article 6(1)(b)): where processing is necessary to provide the healing or coaching services you have requested, or to take steps at your request before entering into a contract.
Legitimate interests (Article 6(1)(f)): to manage enquiries received via the website contact form, maintain communication records, and operate my practice safely and effectively. I have assessed that these interests are not overridden by your rights and freedoms.
Legal obligation (Article 6(1)(c)): where I am required by law to process or retain your data.
Vital interests (Article 6(1)(d)): where processing is necessary to protect your life or the life of another person, for example in a safeguarding situation.

6. How Your Data Is Used

Your personal data is used to:

Respond to enquiries submitted via the website contact form
Deliver and manage the services you have requested
Maintain accurate session and appointment records
Communicate with you regarding appointments or service updates
Ensure safe and appropriate practice
Meet any legal or professional obligations

Your information will not be used for marketing purposes, shared with third parties for commercial gain, or used in any automated decision-making or profiling.

7. Automated Decision-Making

This website and my services do not use any automated decision-making or profiling that produces legal or similarly significant effects on you. All decisions relating to your care and sessions are made by me personally.

8. Confidentiality and Sharing of Information

All information shared with me is confidential and will not be disclosed to any third party unless:

You provide explicit consent
I am legally required to share information
There is a safeguarding concern, such as:
- A risk of self-harm
- A risk of harm to others
- A risk of harm to a child or vulnerable adult

In such cases, I will aim to discuss this with you before sharing information, unless doing so would increase the risk of harm.

9. Data Storage and Security

Your data is stored securely in accordance with UK data protection regulations. Measures include:

Password-protected digital systems
Secure storage for physical documents
Restricted access to authorised personnel only

I take all reasonable steps to protect your information from loss, misuse, or unauthorised access. In the event of a data breach that is likely to result in a risk to your rights and freedoms, I will notify the ICO within 72 hours and inform you without undue delay where required.

10. Data Retention

Personal data is retained only for as long as necessary to fulfil the purposes for which it was collected, including any legal or professional obligations.

Session notes and client records: retained for 3 years from the date of the last session, in line with professional practice guidelines.
Website enquiries and general correspondence: retained for 12 months from the date of the enquiry, or for as long as necessary if a client relationship follows.
Legal obligations: where law requires data to be kept for a longer period, that requirement will take precedence.

Once data is no longer required, it is securely deleted or destroyed.

11. Your Rights Under UK GDPR

Under UK GDPR, you have the following rights regarding your personal data. These rights are not absolute and may be subject to certain conditions or exemptions.

Right of access: to request a copy of the personal data I hold about you (a Subject Access Request).
Right to rectification: to request that inaccurate or incomplete data is corrected.
Right to erasure: to request deletion of your data where there is no longer a lawful reason for me to hold it.
Right to restrict processing: to request that I limit how I use your data in certain circumstances.
Right to data portability: to receive your data in a structured, commonly used format and transfer it to another provider, where technically feasible.
Right to object: to object to processing based on legitimate interests. I will cease processing unless I can demonstrate compelling legitimate grounds.
Rights related to automated decision-making: not to be subject to solely automated decisions that significantly affect you. As stated above, no such processing takes place.

To exercise any of these rights, please contact me using the details in Section 2. I will respond within one calendar month of receiving your request. There is no charge for making a request.

12. Data Transfers

I do not transfer your personal data outside the United Kingdom. If this changes, appropriate safeguards compliant with UK GDPR will be put in place and this policy will be updated accordingly.

13. Complaints

If you have a concern about how I handle your personal data, please contact me in the first instance using the details in Section 2 and I will do my best to resolve the matter promptly.

If you remain dissatisfied, you have the right to lodge a complaint with the Information Commissioner's Office (ICO), the UK's independent data protection authority:

Website: www.ico.org.uk
Telephone: 0303 123 1113
Post: Information Commissioner's Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF

14. Changes to This Privacy Policy

This policy may be updated periodically to reflect changes in legal requirements or service practices. The 'Last Updated' date at the top of this page will be revised accordingly. The most recent version will always be available at www.sheilablamire.com/privacy-policy/

15. Contact

If you have any questions about this Privacy Policy or how your data is handled, please contact:

Name: Sheila Blamire
Email: sheila@sheilablamire.com
Telephone: 07724 750071

This Privacy Policy is designed to support compliance with the UK GDPR and the Data Protection Act 2018.