Privacy Policy – Black Sheep Wellbeing – GDPR

1. Data Controller Data Controller is Ken Etchells, Black Sheep Wellbeing, correspondence via website only – no clinic at home address. Contact: info@blacksheepwellbeing.com 07468 727721 blacksheepwellbeing.co.uk. ICO 00014426800. Practitioner: Ken Etchells MA MBACP 00988492. Qualifications: BSc (Hons) Counselling Psychology 2:1 Leeds Trinity BPS GBC, MA Integrative Counselling and Psychotherapy with Merit Leeds Beckett (BACP Accredited), Specialist Diploma in Trauma Therapy - The Grove Practice - currently in training. DBS: Enhanced Adults & Children Barred Lists Checked - on Update Service. Processor: Konfidens Mindcare AS Røatoppen 11C 0756 Oslo Org 925239070 hello@konfidens.com EU/EEA encrypted separation health notes separately only joined in browser MFA logs DPA app.konfidens.uk Sub-processors konfidens.com/sub-processors. UK GDPR Rep: Euverify Ltd 3rd Floor 86-90 Paul Street London EC2A 4NE gdpr@euverify.com. Video: Whereby European GDPR-compliant. 2. Lawful Bases & Retention Art 6(1)(a)(b)(c)(d)(f) Art 9(2)(a)(h). Retention: Enquiry 6 months, Client notes 7 years after ending per BACP guidance and legal limitation periods then deletion with Art 17(3)(e) exception - can lawfully refuse erasure where needed for legal claims, Financial 7 years per HMRC requirements, What3Words/location 7 days unless incident, Konfidens archive 4 years. Rights: Access 1 month free rectification erasure not absolute restriction objection portability withdraw consent. Complaints ICO 0303 123 1113 BACP 01455 883300 Konfidens hello@konfidens.com Euverify gdpr@euverify.com. No sale. No transfer outside UK/EEA except adequacy/SCCs. No recording by either party - breach = immediate termination & GDPR breach. What3Words legitimate interest lone-worker safety Art 6(1)(f) vital interests Art 6(1)(d).