Privacy and Data Protection Policy
Effective date: 7 July 2026 (version 2.0). Supersedes the policy dated 30 April 2026.
Data controller
The data controller for this service is Gareth Sidwell trading as Us Together. If you have any questions about how your data is handled, you can contact me at concerns@ustogether.co.uk.
What data I collect
When you use this website or make an enquiry, I may collect the following information: your name, email address, and the content of any message you send through the contact form. If you book a session, additional information including your contact details and scheduling preferences will be collected through Acuity Scheduling. During sessions I may take brief notes to support the continuity of the work.
Why I collect it
Your data is collected and used solely for the purpose of providing the service you have requested. This includes responding to enquiries, scheduling and conducting sessions, and maintaining basic records of the work where necessary. I do not use your data for marketing purposes without your explicit consent.
Third party services
I use the following service providers, acting under contract, which may process your data as part of delivering this service: Squarespace (website and contact form), Acuity Scheduling (booking), Stripe (payments), Google Workspace including Google Meet and the Gemini AI assistant (email, storage, session delivery and AI-assisted note drafting under Google’s Cloud Data Processing Addendum, which contractually prohibits my data being used to train AI models), Zoho (client relationship management), Brevo (email communications), and Make and Notion (administrative workflow). Some of these providers process data in the United States; those transfers are protected by the UK Extension to the EU-US Data Privacy Framework or the UK Addendum to Standard Contractual Clauses.
How long I keep your data
Enquiry data is kept for no longer than twelve months from the date of last contact if no working relationship is established. Session notes and related records are kept for seven years from the date of the final session in line with standard professional practice, after which they are securely deleted.
Your rights
Under UK GDPR you have the right to access the personal data I hold about you, to request that it be corrected or deleted, to object to or restrict processing, and to request a copy of your data in a portable format, subject to the legal limits that apply to health-related records. To exercise any of these rights please contact me at us@ustogether.co.uk. I will respond within one calendar month. You also have the right to complain to the Information Commissioner’s Office at ico.org.uk or on 0303 123 1113. Us Together is registered with the ICO as a data controller, registration number 00014667670. How session records are kept, including AI-assisted note drafting and the separate consents involved, is explained in full in the Terms and Conditions of Service.
Cookies
This website uses cookies through Squarespace for basic functionality and analytics. You can manage your cookie preferences through the cookie banner when you first visit the site.
Changes to this policy
I may update this policy from time to time. Any changes will be posted on this page with an updated effective date.