Privacy Policy
Privacy Policy Last updated: 03/03/2026
1. Who I Am
James Garside (Embrace Everything Ltd.) is a psychotherapist practising in the United Kingdom.
I am registered with the Information Commissioner's Office as a Data Controller.
Contact details:
Email: hello@embrace-everything.com
Business address: 1 Blandford Avenue, Kettering, Northants, NN16 9AR
For the purposes of data protection law, I am the Data Controller of the personal data you provide.
2. What Information I Collect
I may collect and process the following categories of personal data:
Name and contact details
Information submitted via contact or booking forms including Calendly
Health information and clinical screening responses (including information about mental health, diagnoses, treatment history, and medication)
Information shared during consultations and therapeutic work
Technical data such as IP address and browser type
Website usage data (including analytics where consent is provided)
Information relating to your health and mental wellbeing is classified as special category data under the UK General Data Protection Regulation.
This data is collected for the purpose of assessing suitability for services, providing psychotherapy, and ensuring appropriate care.
Please do not include sensitive clinical narratives beyond the information requested in booking or contact forms. Detailed therapeutic discussions are reserved for consultations and sessions.
3. How Your Data Is Used
Health-related information may be used to:
Assess suitability for psychotherapy services
Prepare for initial consultations
Provide therapeutic services
Maintain clinical records
Meet professional and legal obligations
Data is processed on the lawful basis of:
Contract (service provision)
Legitimate interests (administration and care)
Explicit consent (for processing special category health data)
5. Confidentiality
As a member of the National Council of Integrative Psychotherapists (NCIP), I adhere to their Code of Ethics and Code of Conduct. You can view their ethical framework here:
All client information is treated as confidential except in circumstances where:
There is risk of serious harm to you or others
There are safeguarding concerns
Disclosure is required by law
Where possible, confidentiality limits will be discussed with you in advance.
6. Data Storage & Security
Health and clinical data is treated with strict confidentiality.
Information is stored securely and access is limited to authorised personnel. I take reasonable technical and organisational measures to protect data against unauthorised access or disclosure.
Data processed via website services and hosting infrastructure is subject to the security standards of Squarespace as a data processor.
7. Booking Forms and Clinical Information
Booking and screening forms request limited health information to:
Ensure the service is appropriate
Prepare for consultation
Support risk awareness and ethical care
These forms are not intended for detailed clinical disclosures. If you wish to share sensitive information, it will be discussed in a therapeutic setting.
8. Data Retention
Clinical records are retained for 7 years after the end of therapy in line with professional guidance and insurance requirements.
After this period, data will be securely deleted or destroyed.
9. Analytics & Cookies
This website may use analytics services (e.g. Google Analytics) to understand website traffic and usage.
You will be asked to consent to non-essential cookies via a cookie banner. You can withdraw consent at any time.
For more information, please see the Cookie Policy.
10. Your Rights
Under UK data protection law, you have the right to:
Access your personal data
Request correction
Request erasure (where applicable)
Restrict or object to processing
Lodge a complaint with the ICO
You can contact the ICO here: ICO
11. Contact
If you have any questions about this Privacy Policy or how your data is handled, please contact: