Privacy Policy – Black Sheep Wellbeing – GDPR

01 – Privacy Policy 1. Data Controller Data Controller is Ken Etchells, Black Sheep Wellbeing, correspondence via website only – NO clinic at home WF9 4NG. Contact: info@blacksheepwellbeing.com 07468 727721 blacksheepwellbeing.co.uk. ICO 00014426800. Practitioner: Ken Etchells MA MBACP 00988492. Insurance: HIS1222343 Newline Syndicate 1218 at Lloyd's £5m/£10m 26 June 2026-27. Qualifications: BSc (Hons) Counselling Psychology 2:1 Leeds Trinity BPS GBC, MA Integrative Counselling BACP Accredited Leeds Beckett, Diploma Trauma Therapy Level 7 Grove. DBS: Enhanced 001906793397 08 Jan 2025 Barred Lists NONE RECORDED. Processor: Konfidens Mindcare AS Røatoppen 11C 0756 Oslo Org 925239070 hello@konfidens.com EU/EEA encrypted separation health notes separately only joined in browser MFA logs DPA app.konfidens.uk Sub-processors konfidens.com/sub-processors. UK GDPR Rep: Euverify Ltd 3rd Floor 86-90 Paul Street London EC2A 4NE gdpr@euverify.com. Video: Whereby European GDPR-compliant. 2. Lawful Bases & Retention Art 6(1)(a)(b)(c)(d)(f) Art 9(2)(a)(h). Retention: Enquiry 6 months, Client notes 7 years after ending per insurance HIS1222343 then deletion Art 17(3)(e) exception can lawfully refuse erasure, Financial 7 years, What3Words/location 7 days unless incident, Konfidens archive 4 years. Rights: Access 1 month free rectification erasure not absolute restriction objection portability withdraw consent. Complaints ICO 0303 123 1113 BACP 01455 883300 Konfidens hello@konfidens.com Euverify gdpr@euverify.com. No sale. No transfer outside UK/EEA except adequacy/SCCs. No recording by either party breach = immediate termination & GDPR breach. What3Words legitimate interest lone-worker safety Art 6(1)(f) vital interests Art 6(1)(d).