Spark Matters

Privacy Policy

Privacy Notice – Spark Matters

Last updated: 27 August 2026

Spark Matters is committed to protecting your privacy and handling your personal data with care and respect. This Privacy Notice explains how I collect, use, store and protect your personal information when you use this website or access my counselling services.

1. What is Spark Matters?

Spark Matters is a private counselling and psychotherapy practice based in the United Kingdom. For the purposes of data protection law, I, Chhavi Kohli, am the data controller.

2. What personal data do I collect?

I may collect and process the following types of personal data:

• Contact and identification data: name, email address, phone number, address and GP name.

• Special category data: information about your mental health, emotional wellbeing and any other health-related information you share during counselling.

• Session information: notes taken during or after sessions.

• Website usage data: information collected through cookies.

• Payment information: details necessary to process payments. I do not store full card details.

3. How do I use your personal data?

I use your personal data to:

• Provide counselling and psychotherapy services.

• Communicate with you about appointments, cancellations and session arrangements.

• Maintain clinical records.

• Comply with legal and professional obligations, including safeguarding.

• Improve my services and website.

4. Legal basis for processing your data

I process your personal data under the following legal bases:

• Consent: you have given clear consent for me to process your data for a specific purpose.

• Contract: processing is necessary for the performance of our counselling contract.

• Legal obligation: I am required to process data to comply with the law, including safeguarding requirements or court orders.

• Vital interests: in rare situations where processing is necessary to protect someone’s life.

Because I process special category data, including health information, I also rely on additional conditions under UK GDPR where applicable.

5. Confidentiality and its limits

Confidentiality is central to my work. However, there are limited circumstances where I may need to share information without your consent, including:

• If there is a risk of serious harm to you or someone else.

• If there are safeguarding concerns involving children or vulnerable adults.

• If required by law or court order.

I will always aim to discuss this with you first where possible and appropriate.

6. How do I store and protect your data?

I take the security of your personal data seriously. I store clinical notes securely and use appropriate technical and organisational measures to protect your information from unauthorised access, loss or damage.

7. How long will I keep your data?

I retain personal data for as long as necessary for the purposes outlined in this notice. Clinical records are normally kept for seven years after therapy ends. In some cases, including work with children or complex cases, records may be kept for longer. After the retention period, your data will be securely destroyed.

8. Who may I share your data with?

I do not sell or rent your personal data. I may share relevant information with:

• Other healthcare professionals, with your consent, such as your GP.

• My clinical supervisor, in anonymised form where possible.

• Legal or regulatory bodies when required by law.

9. Cookies

This website uses cookies to improve your browsing experience. You can manage your cookie preferences through your browser settings and the website cookie banner.

10. Your rights

Under UK GDPR, you may have the following rights:

• The right to access your personal data.

• The right to have inaccurate data corrected.

• The right to erasure.

• The right to restrict processing.

• The right to data portability.

• The right to object to processing.

• The right to withdraw consent at any time.

Some rights may be limited in a therapeutic context. For example, clinical notes may need to be retained because of legal or professional requirements. To exercise your rights, please contact me using the details below.

11. Changes to this Privacy Notice

I may update this Privacy Notice from time to time. The latest version will always be available on this website.

12. Contact me

If you have any questions about this Privacy Notice or how I handle your data, email chhavi@sparkmatters.co.uk. I aim to reply within 24 hours.

You also have the right to make a complaint to the Information Commissioner’s Office (ICO), the UK supervisory authority for data protection issues, where I have registered my practice.

This is not an exhaustive list. Please email me if you require specific information about your data.

Spark Matters

Individual counselling, online and in Edinburgh

Privacy Policy

This website uses cookies.