Privacy Policy
Last updated: 9 August 2026
1. Who I am
Iridescence Counselling Services is operated by Jane Cundasamy. For data-protection purposes, I am the data controller responsible for the personal information described in this policy.
ICO registration number: ZC207714
Email:hello@icounsellingservices.co.uk
2. Information I collect
Depending on how you contact me and which service you use, I may collect:
Your name, email address, telephone number and contact preferences.
Information you provide through the website contact form or by email.
Information required to assess whether a service is appropriate for you.
Appointment, attendance and administrative records.
Counselling, psychotherapy and clinical-supervision records.
Information relating to training or workshop registration and attendance.
Payment and transaction information, where applicable.
Health, wellbeing and other sensitive information relevant to the professional service being provided.
Technical website information, such as IP address, browser information, device information and cookie preferences.
Information about how visitors use the website, where analytics cookies have been accepted.
I aim to collect only information that is relevant and necessary.
3. Contact-form enquiries
The website contact form is intended for initial enquiries only.
Please do not include detailed personal or clinical information in this form. I will respond as soon as reasonably possible to discuss how I may be able to help.
Contact-form submissions are processed through Squarespace and may be delivered to my Gmail account.
4. How I use personal information
I may use personal information to:
Respond to enquiries and communicate with you.
Consider whether a service is appropriate for your needs.
Arrange and provide counselling, psychotherapy, clinical supervision or training.
Manage appointments, attendance, payments and professional records.
Deliver online sessions through Zoom or, occasionally, Microsoft Teams.
Maintain the administration and security of my services.
Meet professional, safeguarding, regulatory or legal responsibilities.
Establish, exercise or defend legal claims where necessary.
Understand how visitors use the website and improve its content, where analytics consent has been given.
I do not sell personal information.
5. Lawful bases
I rely on the following lawful bases under the UK GDPR.
Initial enquiries
For initial enquiries made before a professional relationship is established, I rely on my legitimate interests under Article 6(1)(f).
My legitimate interest is responding to people who contact the practice, communicating about their enquiry and determining whether I can provide an appropriate service.
Providing professional services
When processing is necessary to arrange or provide counselling, psychotherapy, clinical supervision or training, I rely on Article 6(1)(b): processing necessary to enter into or perform a contract.
Legal responsibilities
Where processing is required to meet a legal obligation, I may rely on Article 6(1)(c).
Website analytics and future advertising
Where consent is required for analytics cookies or other non-essential website technologies, I rely on consent under Article 6(1)(a).
Consent may be withdrawn at any time through the website’s cookie settings.
6. Sensitive and special-category information
Counselling and psychotherapy may involve information about physical or mental health, relationships, racial or ethnic background, sexuality, religious or philosophical beliefs, or other sensitive matters.
Where special-category information is necessary to provide counselling or psychotherapy, I rely on Article 9(2)(h) of the UK GDPR, concerning the provision of health or social care, together with the relevant requirements of the Data Protection Act 2018.
Where information must be processed for safeguarding, legal proceedings or another exceptional purpose, I will rely on an appropriate legal condition.
7. Confidentiality and sharing
Personal information is treated confidentially and is only shared where necessary.
The principal technology providers used by the practice are:
Squarespace, for website hosting, contact forms, cookies and website analytics.
Google, through Gmail, for email communications.
Zoom, for online appointments and sessions.
Microsoft Teams, used occasionally for online appointments and sessions.
These organisations may process limited personal or technical information when providing their services.
Information may also be disclosed where:
Disclosure is required by law.
There is a safeguarding concern.
It is reasonably necessary to protect someone from serious harm.
It is required by a court, regulator or other authorised body.
It is necessary to establish, exercise or defend a legal claim.
I do not allow service providers to use confidential client information for their own marketing.
8. Online sessions
Zoom, or occasionally Microsoft Teams, may be used to deliver online counselling, psychotherapy, supervision or training.
These platforms may process information such as a participant’s name, email address, IP address, device information and meeting connection data.
Participants should use a private location and a secure device wherever possible when attending online sessions.
9. International processing
Squarespace, Google, Zoom and Microsoft may process or store information outside the United Kingdom.
Where personal information is transferred internationally, I expect the provider to use an appropriate lawful safeguard, such as an adequacy regulation, the UK International Data Transfer Agreement or an approved contractual addendum.
10. Retention
Client and clinical-supervision records are retained for seven years after the professional relationship ends.
Initial enquiries that do not lead to a professional service are kept only for as long as reasonably necessary to respond and complete any appropriate follow-up.
Training, payment and administrative records are retained only for as long as necessary for the purpose for which they were collected and to meet applicable professional, insurance, accounting or legal requirements.
Website and analytics information is retained according to the relevant Squarespace settings, the purpose for which it was collected and the visitor’s consent choices.
Once information is no longer required, it will be securely deleted or anonymised where reasonably possible.
11. Cookies and analytics
This website uses cookies and similar technologies.
Essential cookies
Squarespace may place cookies that are necessary to:
Operate and secure the website.
Display pages correctly.
Remember cookie preferences.
Provide functions requested by the visitor.
Essential cookies do not require consent where they are strictly necessary to provide the website.
Analytics cookies
Squarespace Analytics may be used to understand:
How many people visit the website.
Which pages are viewed.
How visitors navigate the website.
General device, browser and traffic information.
Where consent is required, analytics cookies will remain disabled until the visitor accepts them.
Visitors can reject non-essential cookies without losing access to the website. Cookie preferences can be changed or withdrawn through the website’s cookie settings.
12. Future advertising
I do not currently use personal information or website cookies for targeted advertising or remarketing.
If advertising, tracking or remarketing tools are introduced in the future:
This privacy policy and the website’s cookie information will be updated before they are activated.
Visitors will be told which advertising providers are involved.
Advertising or tracking technologies will not operate until the required consent has been obtained.
Visitors will be able to reject or withdraw consent as easily as they can provide it.
13. Email communications
Gmail is used to receive enquiries and manage routine communications.
Ordinary email cannot be guaranteed to be completely secure. Please do not send detailed personal or clinical information by email unless this has been discussed and agreed.
I do not currently use client or enquiry information for promotional email marketing. If this changes, appropriate information and consent will be provided first.
14. Security
Reasonable technical and organisational measures are used to protect personal information against unauthorised access, loss, misuse, alteration or disclosure.
However, no method of internet communication or electronic storage can be guaranteed to be completely secure.
15. Your data-protection rights
Depending on the circumstances and lawful basis, you may have the right to:
Request access to your personal information.
Ask for inaccurate or incomplete information to be corrected.
Request deletion of your information.
Request restriction of processing.
Object to certain processing.
Request the transfer of information in a portable format.
Withdraw consent where consent is being relied upon.
These rights are not absolute. A request may be limited by professional, safeguarding, contractual or legal responsibilities.
To exercise a right, contact:
hello@icounsellingservices.co.uk
Right to object
You have the right to object to processing based on legitimate interests. Any objection will be considered carefully, taking account of your rights and the reasons for the processing.
16. Complaints
Please contact Jane first if you have concerns about how your personal information has been handled.
You may also complain to the Information Commissioner’s Office:
Information Commissioner’s Office
Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF
Telephone: 0303 123 1113
Website: ico.org.uk/make-a-complaint
17. Changes to this policy
This policy will be reviewed periodically and updated when services, technology providers or data-processing activities change.