Privacy & Cookies Policy

Last updated: 27/09/2025

Your privacy matters to me

I know that sharing your personal information — whether for therapy or coaching — takes trust. This policy explains, in clear language, how I use, protect, and respect your data. My aim is to be transparent so you feel safe, supported, and in control.

If you do not agree with any part of this policy, please refrain from using the site or services.

1. Who We Are

This Privacy Policy applies to services provided by Aleksandra Balazy-Knas, sole trader, offering coaching and therapy services to individuals globally.

It covers both coaching and therapy clients. Where differences exist — for example, in how health-related information is handled in therapy — these are explained in the relevant sections below.

Services are provided to adults (18+) only. If you are under 18, you may only engage with my services where parental/guardian consent has been obtained in writing.

We are the data controller responsible for your personal data.
ICO Registration Number: ZB811160

You can contact us at:
📧 Email: aleks@unscrewingmotherhood.co.uk
🌐 Website: https://www.unscrewingmotherhood.co.uk/

2. What Data We Collect

We may collect the following types of personal information:

  • Personal & Contact Information
    Full name, email address, phone number, postal address

  • Payment Information
    Billing address, bank/Stripe transaction data (we do not store card numbers)

  • Health & Therapy Information
    Notes or forms relating to your mental wellbeing (therapy clients only)

  • Technical & Usage Data
    IP address, device type, browser version, pages visited, time on site, referral source

  • Marketing Preferences
    Opt-in records and communication choices

3. How We Collect Data

We collect data through:

  • Forms completed on our website (e.g. contact, booking, onboarding)

  • Direct communication (email, phone, sessions)

  • Analytics cookies on our website

  • Payments via Stripe or TidyCal

  • Hosting and business tools (e.g. Google Workspace, Squarespace)

4. Why We Collect Data (Legal Basis)

Under UK GDPR and international data laws, we only process personal data where we have a lawful basis:

  • Contract – to provide you with services you’ve requested

  • Consent – for special category data (e.g. mental health) and marketing communications

  • Legal obligation – for safeguarding, tax or professional regulations

  • Legitimate interest – for basic analytics or improving services

5. Special Category Data & Consent

For therapy clients:
When you share sensitive information about your mental health or wellbeing, this is treated as “special category data” under UK GDPR. By engaging in therapy, you provide explicit consent for us to process this data. We uphold strict confidentiality in line with professional codes (including BABCP standards), unless:

  • There is a risk of serious harm to yourself or others

  • We are legally required to disclose information

For coaching clients:
Coaching is not therapy. We do not create or store therapy notes. The personal information we process is limited to the details you provide in booking forms, questionnaires, and email communication, along with payment and scheduling information. This data is used only to deliver and manage your coaching service.

6. How We Store & Protect Your Data

Your data is stored securely using GDPR-compliant platforms including:

  • Google Workspace (notes, email, forms)

  • Stripe (payments)

  • TidyCal (bookings)

  • Squarespace (website hosting)

We take appropriate physical, digital, and organisational measures to protect data. Access is restricted to the data controller and relevant contracted service providers.

All third-party providers act as data processors on my behalf and are bound by Data Processing Agreements (DPAs) to ensure GDPR compliance.

7. How Long We Keep Your Data

  • Coaching/therapy records are kept for 7 years after your last contact, in line with professional guidelines (e.g., BABCP).

  • For clients under 18, records may be kept until age 25.

  • Email, forms, and enquiries are retained for up to 12 months unless required longer for legal or administrative purposes.

8. Who We Share Your Data With

We do not sell your data. We only share your data when necessary with:

  • Professional platforms (e.g. Stripe, Google, TidyCal)

  • Clinical supervisors (therapy clients only; anonymous case discussion)

  • Legal/regulatory bodies (if required)

All third-party providers are GDPR-compliant and bound by data processing agreements.

9. International Data Transfers

We may transfer your data outside the UK or EU when using international platforms (e.g., Google, Stripe). We ensure your data is protected by:

  • Adequacy decisions (e.g. Canada)

  • Standard Contractual Clauses (SCCs) or other safeguards

By working with me as an international client, you acknowledge that your data may be processed outside your home country, subject to these safeguards.

10. Your Legal Rights

You have the right to:

  • Access your data (“Subject Access Request”)

  • Correct inaccuracies

  • Request deletion (subject to legal/professional obligations)

  • Object to or restrict processing

  • Data portability (receive your data in a usable format)

  • Withdraw consent at any time

  • Lodge a complaint with the Information Commissioner’s Office (www.ico.org.uk)

If you have concerns about how your data has been handled, please contact me first. If you are not satisfied, you have the right to lodge a complaint with the ICO.

We respond to valid data requests within one month.

11. Cookies

Our website uses cookies to enhance functionality and monitor performance.

Types of cookies we use:

  • Essential – for core website functions

  • Performance – for analytics (e.g., page views)

  • Functionality – remembering user settings/preferences

You can manage or disable cookies in your browser. For more on cookies, visit www.aboutcookies.org.

12. Marketing Communications

If you opt in, we may send you newsletters or service updates via email. You can unsubscribe at any time using the link in our emails or by contacting us.

We will only send marketing emails with your explicit consent, or where you are an existing client and the communication relates to similar services (soft opt-in under PECR).

13. Third-Party Links

Our website may include links to external websites (e.g., social media or articles). We are not responsible for their privacy practices. Please review their policies separately.

14. Data Breach Response

In the unlikely event of a data breach that may compromise your personal data, I will notify you and the ICO (where required) within 72 hours, in line with GDPR obligations.

15. Automated Decision-Making & Profiling

I do not use your personal data for automated decision-making or profiling.

16. Changes to This Policy

We may update this Privacy Policy from time to time. The latest version will always be available on this page with the “last updated” date at the top.

17. Contact Us

For questions about this policy or to exercise your rights, please contact:
📧 Email: aleks@unscrewingmotherhood.co.uk
📍 Data Controller: Aleksandra Balazy-Knas, Hinckley, England, United Kingdom
ICO Registration No.: ZB811160