Privacy Policy

1. Who we are

Puzzle Peace ADHD Coaching and Psychotherapy is operated by Maggie Hall, trading as Puzzle Peace ADHD Coaching and Psychotherapy, based in Gotham, Nottinghamshire, NG11.

For the purposes of UK data protection law, Maggie Hall is the data controller for personal data collected in connection with this business.

Contact: hello@puzzlepeaceadhd.co.uk
ICO Registration Number: ZC033803

This policy explains what personal data we collect, why we collect it, how we use it, and what your rights are under UK GDPR and the Data Protection Act 2018.

2. What personal data we collect

We collect only the minimum personal data necessary to operate our coaching and psychotherapy services. This may include:

• Contact information: your name and email address, provided when you contact us via email.
• Session-related information: information you share during coaching or psychotherapy sessions or in email correspondence, which may include personal circumstances, goals, challenges, and health-related information.
• Scheduling information: dates and times of sessions and any related correspondence.
• Payment information: records of payments made (date, amount, and session reference). No card or bank account details are collected or stored.

We do not collect any data via this website automatically. This is a static website and uses no cookies, analytics tools, tracking scripts, or contact forms. No personal data is submitted through the website itself.

3. How we collect your data

We collect personal data only when you provide it to us directly — for example, when you send us an email enquiry or when you engage us as a client. We do not collect data from third parties.

4. Why we use your data and our lawful basis

We use your personal data for the following purposes:

• To respond to your enquiry — lawful basis: legitimate interests (to communicate with prospective clients).
• To deliver psychotherapy and coaching services — lawful basis: performance of a contract (to fulfil our agreement with you).
• To keep records of sessions and progress — lawful basis: legitimate interests (to provide a quality psychotherapy and coaching service and maintain professional standards).
• To process payment and maintain financial records — lawful basis: legal obligation (to comply with accounting and tax requirements).

Where we process any special category data (such as health-related information you choose to share in the context of psychotherapy or coaching), we do so on the basis of explicit consent, which you may withdraw at any time.

We will never use your data for unsolicited marketing, and we will never sell or share your data with third parties for marketing purposes.

5. How long we keep your data

• Enquiries that do not lead to ongoing work: email correspondence is retained for up to 1 month from the date of last contact, after which it is deleted.
• Client records: session notes and correspondence are retained for 7 years from the end of our working relationship, in line with the requirements of our professional body and insurance provider. After this period, records are securely deleted.
• Financial records: payment records are retained for 6 years as required by HMRC.

6. How we keep your data safe

We take the security of your personal data seriously. Email sent to our published address is forwarded by our domain registrar, Porkbun, to a password-protected email account provided by Virgin Media. Any physical or digital records are stored securely with access restricted to Maggie Hall only.

We will never send sensitive personal information in unencrypted emails without your knowledge. If you have concerns about how you communicate with us, please raise this when you get in touch.

7. Sharing your data

We do not sell, rent, or share your personal data with third parties, except in the following limited circumstances:

• Professional supervision: as part of our commitment to ethical practice, we receive regular supervision from a qualified supervisor. Information shared in supervision is anonymised wherever possible. Our supervisor is bound by confidentiality.
• Legal obligation: we may disclose information if required by law, or if we have a safeguarding concern that requires us to act to protect someone from serious harm. We will always aim to discuss this with you first, unless doing so would put someone at risk.
• Service providers: email sent to our published address is routed by Porkbun, our domain registrar, which operates the forwarding for that address, and is delivered to a mailbox provided by Virgin Media. Both handle the content of those messages in the course of providing their services. Our website is hosted by Netlify (see section 8).

8. Cookies and website data

This website does not use cookies, analytics software, tracking pixels, or any other technology that collects data about your visit. No personal data is stored or transmitted when you browse this website.

The hosting provider (Netlify) may set a strictly functional cookie for the purposes of routing and load balancing. This cookie contains no personal data and is exempt from consent requirements under PECR.

9. Your rights under UK GDPR

Under UK data protection law, you have the following rights in relation to your personal data:

• Right of access: you can ask for a copy of the personal data we hold about you.
• Right to rectification: you can ask us to correct any inaccurate or incomplete data.
• Right to erasure: you can ask us to delete your data, subject to legal retention requirements.
• Right to restriction: you can ask us to restrict the processing of your data in certain circumstances.
• Right to data portability: you can ask for your data in a commonly used, machine-readable format.
• Right to object: you can object to processing based on legitimate interests.
• Right to withdraw consent: where we rely on your consent to process data, you can withdraw it at any time.

To exercise any of your rights, please contact us at: hello@puzzlepeaceadhd.co.uk. We will respond within one calendar month.

10. Right to complain

If you have concerns about how we handle your personal data and we have not been able to resolve them to your satisfaction, you have the right to lodge a complaint with the Information Commissioner's Office (ICO):

• Website: ico.org.uk
• Phone: 0303 123 1113

11. Changes to this policy

We may update this Privacy Policy from time to time to reflect changes in our practice or legal requirements. The date at the top of this page shows when it was last updated. We encourage you to review it periodically.

If we make significant changes that affect how we use your personal data, we will contact active clients directly.

12. Contact

If you have any questions about this Privacy Policy or how we handle your data, please get in touch:

Maggie Hall
Puzzle Peace ADHD Coaching and Psychotherapy
hello@puzzlepeaceadhd.co.uk