Privacy policy
Last updated: 20 September 2026
This page explains what personal information Sandstone Counselling collects through this website, why it is collected, how long it is kept and what you can ask me to do with it.
Who I am
Sandstone Counselling is a private CBT counselling practice run by Georgia Stride, working online and in Glasgow city centre. For data protection purposes, Ms Georgia Rose Stride is the data controller for the information described on this page.
Registered with the Information Commissioner's Office (ICO), registration number ZC088691.
You can reach me about anything on this page at georgia@sandstonecounselling.co.uk.
What this website collects
This site has no analytics, no advertising trackers and no third-party cookies. It sets no cookies of its own. The only personal information it collects is what you type into the enquiry form and choose to send.
| What | Why |
|---|---|
| Your name | So I know who I'm replying to |
| Your email address | To reply to your enquiry |
| Your phone number (optional) | Only if you'd rather I called |
| Whether you'd prefer to meet online or in person | To answer your question properly |
| What's bringing you here | To understand whether I'm the right person to help, and to prepare for a first conversation |
My website host also processes your IP address briefly in order to serve the page and to stop automated spam. It is not stored with your enquiry and is not used to identify you.
Information about your health
If you tell me what's bringing you to counselling, that is likely to count as special category data — information about your health — which the law protects more strictly.
I only ever have this information because you chose to type it in. You do not have to. A sentence as short as “I'd like to talk about anxiety”, or simply asking for a call, is completely fine.
Where it is stored
When you send the form, your enquiry is delivered straight to my email inbox. That inbox is my Google Workspace account, which only I can access, protected by two-factor authentication. No copy is kept anywhere else, no database holds it, and nothing is published, sold or shared for marketing, ever.
Who else is involved
- Google (Workspace / Gmail) — the inbox your enquiry is delivered to
- Vercel — website hosting; it passes your enquiry to my inbox and does not store it
- Cloudflare — domain name routing for this site
These are processors acting on my instructions under contract. They do not use your information for their own purposes.
How long it is kept
| Situation | Kept for |
|---|---|
| You enquire and we don't go ahead | 12 months, then deleted |
| You enquire and become a client | Your enquiry is folded into your client record and kept under the practice's clinical records policy |
| You ask me to delete it | Deleted on request, normally within 30 days |
Your rights
Under UK data protection law you can ask me to:
- show you what I hold about you
- correct anything that's wrong
- delete it
- stop or limit how I use it
- send you a copy in a portable format
- withdraw your consent, at any time
Just email me at georgia@sandstonecounselling.co.uk. There is no charge and I'll respond within one month.
If you're unhappy with how I've handled your information, you can complain to the Information Commissioner's Office at ico.org.uk/make-a-complaint or on 0303 123 1113. I'd appreciate the chance to put it right first, but you don't have to come to me before going to them.
Keeping it safe
The site is served over HTTPS, so what you type is encrypted in transit. The enquiry form is protected against automated abuse. Accounts holding enquiries use two-factor authentication. No system is perfect, but I keep what I hold to the minimum I actually need.
Changes to this policy
If this policy changes, the date at the top changes with it. Material changes affecting information I already hold about you will be sent to you directly.