Privacy Policy

Last updated: 23 September 2026

1. Who we are

Sarah Willocks, trading as Resilience Therapy, is the data controller for this website. Registered with the Information Commissioner's Office, registration reference ZB608919.

Contact: contact@resiliencetherapy.co.uk  |  07492 321757

2. What data we collect and why

• Enquiry form: your name, email address, an optional phone number, and the message you write. This is used for one purpose only: to reply to your enquiry. Legal basis: your consent, given by ticking the consent box on the form. The box is never pre-ticked, and the form cannot be sent without it.

We ask for the minimum needed to get back to you, and nothing more. The form does not ask about your health, substance use, or personal circumstances, and we ask you not to include those details in your message. Information of that kind is special category data under UK GDPR Article 9 and deserves the protection of a private conversation rather than a web form. If you do include such details, we will handle them in confidence under Article 9(2)(h) and delete them along with the rest of your enquiry.

The enquiry form uses a hidden decoy field to catch automated spam. It sets no cookies, and deliberately avoids third-party CAPTCHA services so that submitting the form does not share your data with anyone beyond the parties named below.

3. Who we share it with

Data is shared only with the third-party service needed to operate this website: Netlify (website hosting and enquiry form submissions). Data is never sold or shared for marketing purposes.

Netlify is based in the United States, so submitting the enquiry form involves a transfer of your data outside the UK. That transfer is covered by Netlify's own data processing agreement and standard contractual clauses, which require it to protect your data to UK standards.

4. How long we keep it

Enquiry form submissions are kept only as long as necessary to respond to you, and are then deleted, or sooner if you ask us to. If you go on to become a client, retention is governed by our separate client records policy, which we will explain to you at that point.

5. Your rights

Under UK GDPR you have the right to access, correct, erase, or restrict the personal data we hold about you, to object to processing, and to request a copy of your data in a portable format. Where we rely on your consent, you can withdraw it at any time; this will not affect anything already done on the basis of that consent. To exercise any of these rights, contact us using the details above. We will respond within one month.

6. Complaints

If you believe your data has been mishandled, you have the right to complain to the Information Commissioner's Office at ico.org.uk.

7. Cookies

This site does not use analytics, advertising or tracking cookies, and does not set any non-essential cookies.

← Back to home