Privacy

PRIVACY POLICY 

Last updated: February 2026

This Privacy Policy explains how The Spacious Place (“we”, “us”, “our”) collects, uses, stores, and shares personal information when you use our website and services (together, the “Services”). It also explains your privacy rights and how you can contact us.

This Policy applies when you:

  • Visit our website at [insert Paul’s website URL]

  • Contact us through our site, email, phone, or other channels

  • Book or enquire about therapy, leader support sessions, training, facilitation, or related services

  • Subscribe to updates or marketing communications (if offered)

  • Interact with us in connection with events, training, or referrals

If you do not agree with this Policy, please do not use our Services.

Key points (summary)

  • What we collect: We collect information you provide (for example, name, email address, and details you choose to share when enquiring). We also collect some technical information automatically (for example, IP address and browser details).

  • Sensitive information: If you contact us about therapy or wellbeing support, the information you share may include health-related or other sensitive information. We only use this information as needed to respond and provide services, and we treat it with particular care.

  • How we use information: We use personal information to respond to enquiries, deliver services, manage bookings, improve our website, and meet legal or professional obligations.

  • Sharing: We only share data with trusted service providers when needed (for example, website hosting, email, analytics) or where legally required.

  • Security: We use appropriate measures to protect personal information, but no online system is 100% secure.

  • Your rights: Depending on your location (including UK/EU), you may have rights to access, correct, delete, or restrict use of your personal information.

1. What information we collect

A) Information you provide to us

You may provide personal information when you:

  • Fill out a contact form

  • Enquire about or book services

  • Subscribe to emails (if offered)

  • Communicate with us by email, phone, or other channels

This information may include:

  • Name

  • Email address

  • Phone number

  • Organisation / role (if relevant)

  • Booking-related information

  • Any message or details you choose to share

Therapy and wellbeing enquiries: If you contact us about counselling, stress, burnout, or related concerns, the information you share may include sensitive personal data (for example, health-related information). You are always in control of what you disclose, and we encourage you not to share more than you are comfortable sharing in an initial enquiry.

B) Information collected automatically

When you visit our website, we may automatically collect limited technical information such as:

  • IP address

  • Browser type and settings

  • Device and operating system information

  • Approximate location (derived from IP address)

  • Pages viewed and actions taken on the website

  • Date/time of access and referring URLs

We use this information to operate the website, maintain security, and understand how the site is used.

2. How we use your information

We use personal information for purposes such as:

  • Responding to enquiries and communicating with you

  • Providing and administering our services (including bookings and scheduling)

  • Managing website functionality and security

  • Improving our Services and understanding how visitors use our site

  • Sending updates or marketing communications (only where permitted and where you can opt out at any time)

  • Complying with legal obligations and professional standards

  • Protecting the rights, safety, and wellbeing of individuals where necessary

3. Legal bases for processing (UK GDPR / GDPR)

If you are in the UK or EEA, we rely on one or more of the following legal bases under data protection law:

  • Consent: where you have given consent for a specific purpose (for example, marketing emails).

  • Contract: where processing is necessary to provide services you request or to take steps before entering a contract.

  • Legitimate interests: where processing is necessary for our legitimate interests (for example, website security, service improvement), provided those interests are not overridden by your rights.

  • Legal obligation: where we must comply with a legal requirement.

  • Vital interests: where processing is needed to protect someone’s life or safety.

Sensitive (special category) data: Where you share sensitive personal information (for example, in the context of counselling or wellbeing support), we only process it when a valid condition applies under UK GDPR (typically explicit consent, healthcare-related grounds where relevant, or another applicable condition) and we apply additional safeguards.

4. When we share your personal information

We do not sell your personal information.

We may share personal information:

  • With trusted service providers who help us run our Services (for example, website hosting, email systems, analytics). They may only use your data to perform services for us under appropriate contractual safeguards.

  • If required by law, regulation, or a lawful request from authorities

  • If necessary to protect rights, safety, or prevent wrongdoing

  • In connection with a business reorganisation or transfer (rare, but if it occurred, we would take steps to protect your information)

Payments: If you accept payments online (if applicable), payment information is handled by the payment provider (for example Stripe) and not stored by us beyond what is necessary for records. Their privacy policy will apply to payment processing.

5. Cookies and tracking technologies

We may use cookies and similar technologies to:

  • Ensure the website works properly

  • Remember preferences

  • Understand website usage and improve performance

We may also use analytics services such as Google Analytics to understand how visitors use the site. You can generally control cookies via your browser settings and, where applicable, via any cookie banner/preferences tool on the site.

If you use Google Analytics, you can opt out using Google’s opt-out tool.

Cookie Notice: [Insert link to Cookie Policy/Notice if you create one]

6. How long we keep your information

We keep personal information only for as long as needed for the purposes described in this Policy, including:

  • Responding to enquiries

  • Providing services

  • Keeping records as required by law, insurance, or professional standards

Retention periods vary depending on the nature of the information and our obligations. Where we no longer need the information, we will delete it or anonymise it, unless we are required to keep it for legal reasons.

7. How we keep your information safe

We use reasonable organisational and technical safeguards designed to protect personal information. However, no website or electronic storage system can be guaranteed to be fully secure. You share information with us at your own risk, and we encourage you to use secure networks when communicating online.

8. Children’s privacy

Our Services are not intended for children, and we do not knowingly collect personal information from anyone under 18. If you believe a child has provided us personal information, please contact us so we can take appropriate steps.

9. Your privacy rights

Depending on where you live, you may have rights to:

  • Request access to your personal information

  • Correct inaccurate information

  • Request deletion (in some circumstances)

  • Restrict or object to processing (in some circumstances)

  • Request data portability (where applicable)

  • Withdraw consent (where processing is based on consent)

If you are in the UK, you also have the right to complain to the Information Commissioner’s Office (ICO) if you believe your data is being handled unlawfully.

10. Do Not Track

Some browsers offer a “Do Not Track” setting. At present, there is no consistent industry standard for responding to DNT signals, and we do not guarantee we will respond to them.

11. US residents (if applicable)

If you actively market to or serve US residents, additional state privacy rights may apply. If not, you can remove this section entirely to keep the policy lean.

If you want to keep it, we can tailor it properly once we know whether Paul:

  • Sells services to US residents

  • Uses targeted advertising

  • Has “sales/sharing” activity as defined in certain US state laws

12. Changes to this Privacy Policy

We may update this Policy from time to time. The revised version will be posted on this page with the updated date at the top.

13. Contact us

If you have questions about this Policy or want to exercise your rights, contact:

The Spacious Place
Email: [insert Paul’s email]
Address: [insert postal address]
Website: [insert URL]

14. Requests to access, update, or delete your information

To request access, correction, deletion, or other rights, please contact us using the details above. We may need to verify your identity before processing your request.

Contact form