Privacy Policy

Last updated: 14.11.2025

This Privacy Policy explains how Someone2TalkTo (“Someone2TalkTo”, “we”, “us”, “our”) collects, uses and protects your personal data when you use our website:

https://www.someone2talkto.co.uk (“the Website”).

We are committed to handling your information fairly, transparently and in line with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

This Privacy Policy sits alongside our Terms of Use and Cookie Policy.

If you have any questions, you can contact us at:

• Email: support@someonetotalk.co.uk

---

1. Who we are and our role

Someone2TalkTo operates a UK-based directory and library for people seeking support with emotional overwhelm, burnout, ADHD and neurodiversity, menopause, grief, and related issues, and for organisations wanting workplace support.

For data protection purposes, Someone2TalkTo is the data controller for personal data collected via this Website.

Important: Independent practitioners listed in the directory (for example counsellors, coaches, mindfulness practitioners) are separate data controllers for the client records and contact information they hold in their own practice. Their own privacy policies will apply to any services you arrange directly with them.

---

2. What personal data we collect

The data we collect depends on how you use the Website. We may collect and process the following categories of personal data.

2.1 Website visitors

When you visit the Website, we may collect:

• Technical data: IP address, browser type and version, device type, operating system, time zone setting, approximate location (country/region), and other technical information automatically collected through server logs and security tools.
• Usage data: pages visited, time spent on pages, clicks and navigation paths, referring URLs.

This data may be collected through our web hosting provider, security tools and (if you consent) analytics cookies.

2.2 Contact and enquiry data

If you contact us through a form, email or other method, we may collect:

• Name
• Email address
• Phone number (if provided)
• Your message and any information you choose to include

We do not need detailed medical history or sensitive information in order to respond to general enquiries and we encourage you not to include more than is necessary.

2.3 Practitioner / member data

If you enquire about or join the directory as a practitioner, we may collect:

• Name and contact details (email, phone)
• Business name and address (if applicable)
• Professional profile information (bio, qualifications, modalities, specialisms, professional memberships, insurance details)
• Website and social media links
• Location / areas you serve
• Content you provide for your profile and any images you supply
• Billing details and payment information (where relevant, usually handled via our payment provider)

We may also, with your consent, collect information about:

• Lived experience (for example, neurodivergence, long-term conditions) if you choose to share this as part of your profile
• Demographic information (for example, languages spoken, LGBTQ+ identity) where relevant to how you wish to be found in the directory

2.4 Newsletter and updates (if used)

If you sign up to a mailing list, we will collect:

• Name (if provided)
• Email address
• Your communication preferences (for example, “practitioner updates”, “Library & Events updates”)

2.5 Event / workshop bookings (if used)

If you book onto an event or workshop promoted via Someone2TalkTo, we may collect:

• Name
• Email address
• Your booking details (event name, date, ticket type)
• Any access requirements you choose to share

If events are run by an independent practitioner or organisation, they will normally be the controller for the event itself and may collect additional data directly from you.

2.6 Special category data (sensitive information)

The UK GDPR treats certain types of information as “special category data”, including data about health, racial or ethnic origin, religious beliefs, sexual orientation and other sensitive characteristics.

We do not intentionally seek to collect special category data via this Website. However, you may choose to share information about your mental or physical health, neurodivergence or other sensitive topics in a message or as part of a practitioner profile.

• For enquirers, we ask you to avoid including more sensitive detail than necessary. If you do share such information, we will treat it with extra care and only use it to respond to your query or signpost support.
• For practitioners, if you choose to disclose aspects of your lived experience or identity in your profile (for example, “I am neurodivergent” or “I am a LGBTQ+ therapist”), we will process that information based on your explicit request to publish it.

We will not use special category data for profiling or automated decision-making that has legal or similarly significant effects.

---

3. How we collect your data

We collect data:

• Directly from you, when you:
  • browse the Website
  • send us a message or email
  • apply to join or manage a directory listing
  • sign up for newsletters or updates
  • book onto an event promoted by us
• Automatically, when you use the Website (via logs, cookies and similar technologies)
• From publicly available sources, for example:
  • practitioner websites and professional registers, to verify information or to build directory entries with your knowledge and agreement

---

4. Why we use your data (purposes) and lawful bases

We must have a lawful basis under the UK GDPR each time we use your personal data.

Below are the main purposes and lawful bases that apply to this Website.

4.1 Running and securing the Website

• Purpose: to operate, maintain and secure the Website; to troubleshoot and prevent abuse or attacks (for example, spam, hacking, misuse).
• Data: technical and usage data, security logs.
• Lawful basis: Legitimate interests – our legitimate interest in providing a secure, functioning website and protecting it from misuse.

4.2 Responding to enquiries

• Purpose: to respond to your messages, questions or feedback.
• Data: contact and enquiry data (including any information you choose to share).
• Lawful basis:
  • Legitimate interests – our interest in responding to people who contact us, and
  • where an enquiry is made about joining as a practitioner or booking services, Contract – to take steps at your request before entering into a contract.

Where enquiries include special category data (for example, information about your mental health), we will only use that information with your explicit consent and limit our use to what is necessary to respond or signpost.

4.3 Operating the practitioner directory

• Purpose: to review applications, set up and manage practitioner listings, publish profiles, administer membership and payments, and communicate with listed practitioners.
• Data: practitioner/member data and, if relevant, special category data you ask us to publish (for example, lived experience).
• Lawful basis:
  • Contract – to set up and perform our agreement with you as a directory member.
  • Legitimate interests – our interest in running a curated directory and promoting practitioners to visitors.
  • For any special category data you ask us to include in your profile, explicit consent (you can withdraw this at any time by asking us to edit or remove that information).

4.4 Providing the Library & Events content

• Purpose: to publish articles, guides and event listings on burnout, ADHD and neurodiversity, menopause, grief and related topics, including practitioner-authored content.
• Data: practitioner profile information (for example, name, short bio), and any contributor details you provide.
• Lawful basis:
  • Legitimate interests – our interest in providing high-quality, evidence-aware content to visitors and showcasing our network.

4.5 Email newsletters and updates

• Purpose: to send you news, articles, updates about events, or information about practitioner opportunities.
• Data: name, email address, preferences.
• Lawful basis:
  • Consent – we will only send you email marketing if you actively opt in, and you can withdraw consent at any time by clicking “unsubscribe” or contacting us.

4.6 Analytics and performance

• Purpose: to understand how visitors use the Website so we can improve content, navigation and accessibility.
• Data: technical and usage data, cookie identifiers, aggregated statistics.
• Lawful basis:
  • Consent – non-essential analytics cookies are only used if you choose to accept them via the cookie banner.

4.7 Legal, regulatory and business obligations

• Purpose: to comply with legal duties (for example tax and accounting), to respond to complaints or legal claims, and to maintain appropriate business records.
• Data: any data relevant to the issue, including practitioner contracts and communications.
• Lawful basis:
  • Legal obligation – where we must retain or disclose certain information by law.
  • Legitimate interests – our interest in protecting our rights, dealing with disputes, and running the business responsibly.

---

5. Who we share your data with

We only share personal data when necessary and with appropriate safeguards in place. We may share data with:

• Service providers who help us run the Website and business, such as:
  • website hosting and maintenance
  • email service providers
  • form and directory plugins
  • payment processors (for practitioner memberships)
  • analytics providers (if used)
• Independent practitioners, where you ask us to pass on your contact details or make an introduction
• Professional advisers, such as accountants, legal advisers or insurers, where reasonably necessary
• Authorities or regulators, such as the police, courts or the Information Commissioner’s Office, where we are legally required or permitted to do so

We do not sell your personal data.

---

6. International transfers

Some of our service providers may be based outside the United Kingdom (for example, email or analytics providers). Where this is the case, and personal data is transferred internationally, we will ensure that an appropriate safeguard is in place, such as:

• an adequacy decision (where the destination country has been recognised as providing an equivalent level of protection), or
• standard contractual clauses / international data transfer agreements approved by the UK authorities.

You can contact us if you would like more information about international transfers relevant to this Website.

---

7. How long we keep your data

We keep personal data only for as long as necessary for the purposes set out in this Policy, and to meet any legal, accounting or reporting requirements.

As a guide:

• Website logs & security records: typically up to 12–24 months.
• Contact/enquiry emails: normally up to 2 years after we close the enquiry, unless needed longer in case of complaints or legal issues.
• Practitioner directory records: for the duration of the practitioner’s listing, plus up to 6 years afterwards for business and accounting records.
• Newsletter / mailing list data: until you unsubscribe or your email repeatedly bounces.
• Event booking records: for the life of the event and any follow-up required, plus any additional period needed for legal or accounting reasons.

When data is no longer needed, we will delete it or anonymise it.

---

8. Your rights

Under the UK GDPR, you have a number of rights in relation to your personal data.

These include the right to:

• Access – ask for a copy of the personal data we hold about you.
• Rectification – ask us to correct inaccurate or incomplete data.
• Erasure – ask us to delete your data in certain circumstances (“the right to be forgotten”).
• Restriction – ask us to restrict the processing of your data in certain circumstances.
• Data portability – receive your data in a structured, commonly used and machine-readable format and/or request that we transmit it to another controller, where technically feasible and where the processing is based on consent or contract.
• Object – object to processing based on our legitimate interests, and to direct marketing at any time.
• Withdraw consent – where we rely on consent (for example for newsletters or certain cookies), you can withdraw that consent at any time.

Some of these rights are subject to conditions and exceptions.

To exercise any of your rights, please contact us at:

• Email: support@someonetotalkto.co.uk

We may need to verify your identity before responding to your request.

---

9. Complaints

If you have concerns about how we handle your personal data, we would encourage you to contact us first so we can try to resolve the issue.

You also have the right to make a complaint to the Information Commissioner’s Office (ICO), the UK supervisory authority for data protection:

• Website: www.ico.org.uk
• Telephone: 0303 123 1113
• Address: Information Commissioner’s Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF

---

10. Children and young people

This Website is primarily intended for adults. If you are under 18, you should use this Website with the knowledge and support of a parent, carer, guardian or other trusted adult.

We do not knowingly collect personal data from children for marketing purposes.

---

11. Other websites and practitioner sites

The Website contains links to:

• practitioner websites
• external organisations and resources
• events, booking platforms and social media

These sites are not operated by us and have their own privacy policies. We are not responsible for their content or privacy practices. We encourage you to read the privacy information on any site you visit.

---

12. Changes to this Privacy Policy

We may update this Privacy Policy from time to time, for example:

• to reflect changes in how we use personal data
• to reflect updates to the Website or services
• to comply with new legal or regulatory requirements

When we make significant changes, we will:

• update the “Last updated” date at the top of this page, and
• where appropriate, display a notice on the Website or in our communications

Your continued use of the Website after any changes are posted will indicate that you have read and understood the updated policy.

---