Bruce Greenhalgh
Bruce Greenhalgh sailboat logo

Privacy Policy

Last updated: 16/07/2026

1. Who we are

This website is operated by Mindful Consultant Services Ltd, a company registered in England and Wales under company number 12985727, whose registered office is at 11, Wood Crescent, Bicester OX25 2BD (“we”, “us”, “the practice”), trading as brucegreenhalgh.com and mindfulconsultantservices.com. Bruce Greenhalgh provides services through this company as a BACP-accredited counsellor, supervisor and mindfulness teacher.

For the purposes of UK data protection law, Mindful Consultant Services Limited is the data controller for personal data collected through this website.

Contact: bruce@brucegreenhalgh.com

2. What this policy covers

This policy explains how we collect, use, store and protect personal data submitted through this website — principally via the contact/enquiry form. It does not cover the separate, more detailed confidentiality arrangements that apply once someone becomes a client in therapy, supervision or coaching; those are set out in your client agreement and in line with the BACP Ethical Framework.

3. What personal data we collect

When you use the contact form on this site, we collect:

  • Your name
  • Your email address
  • Your phone number, if you choose to provide one
  • The content of your message, and any other information you choose to include in it

Because enquiries relate to counselling, mindfulness, supervision or organisational wellbeing services, the message you send may contain special category data under UK GDPR — for example, information about your mental or physical health, or other sensitive matters. We only receive this because you have chosen to share it with us; we do not ask you to categorise or disclose health information through the form itself.

We do not currently collect payment details, booking calendar data, or any information via cookies or website analytics through this site (see Section 8).

4. How we use your information and our lawful basis

We use the information you submit to:

  • Respond to your enquiry and discuss whether our services are a good fit
  • Arrange an initial conversation, session or engagement
  • Keep a record of the enquiry for our own administration

Our lawful bases for processing are:

  • Legitimate interests (Article 6(1)(f) UK GDPR) — responding to enquiries about our services is a reasonable and expected part of running the practice and does not override your interests or rights.
  • Steps prior to entering a contract (Article 6(1)(b)) — where your enquiry is intended to lead to booking a service with us.
  • Explicit consent (Article 9(2)(a)) — where your message includes special category data (such as health information), we rely on the fact that you have knowingly and voluntarily provided it to us for the purpose of your enquiry.

We do not use your data for marketing, do not sell or rent it to third parties, and do not use it for any automated decision-making or profiling.

5. Confidentiality as a practitioner

If your enquiry leads to us working together — in therapy, supervision, mindfulness teaching or a coaching relationship — a separate and more detailed duty of professional confidentiality applies, governed by the BACP Ethical Framework for the Counselling Professions and set out in your client agreement. That agreement covers the limits of confidentiality, including circumstances where disclosure may be required by law, to prevent serious harm, or as part of anonymised clinical supervision.

6. How long we keep your information

  • Enquiries that do not proceed to a booked service: retained for up to 12 months, then securely deleted.
  • Records relating to clients we go on to work with: retained in line with BACP guidance and our professional insurance requirements — typically 7 years from the end of our work together for adult clients, and longer where the client was under 18 at the time (until their 25th birthday, in line with common practice for child records).

7. Who we share your information with

We do not share your personal data with third parties for their own marketing purposes. Your information may be seen by:

  • Our website hosting or email provider, solely to enable the site and email inbox to function
  • A clinical supervisor, in anonymised form, as part of standard professional supervision (this does not apply to your identifying details)
  • Professional, legal or regulatory bodies, where we are required by law or professional obligation to disclose information

Current third-party service providers used to run this site: Porkbun.com.

8. Cookies and analytics

This website does not currently use cookies, analytics tools (such as Google Analytics) or marketing/tracking technologies. If this changes in future — for example, if we add website analytics — we will update this policy and, where required, add a cookie consent banner.

9. International transfers

Our retreats take place in Greece, within the European Economic Area. Where any personal data is transferred in connection with a retreat (for example, to a venue for logistics purposes), the EEA is recognised as offering an adequate level of data protection under UK law, so no additional transfer safeguard is required. We do not otherwise transfer personal data outside the UK/EEA.

10. Your rights

Under UK GDPR, you have the right to:

  • Access the personal data we hold about you
  • Ask us to correct inaccurate or incomplete data
  • Ask us to delete your data, in certain circumstances
  • Ask us to restrict how we use your data
  • Object to our processing, where it is based on legitimate interests
  • Ask for a copy of your data in a portable format
  • Withdraw consent at any time, where we rely on consent (this does not affect the lawfulness of processing before withdrawal)

To exercise any of these rights, contact us at bruce@brucegreenhalgh.com. If you are unhappy with how we have handled your data, you also have the right to complain to the Information Commissioner’s Office (ICO) at ico.org.uk or 0303 123 1113.

11. How we protect your information

We take reasonable technical and organisational measures to protect the personal data you share with us, including restricting access to enquiry messages and using reputable, secure hosting and email providers. No method of transmission over the internet is completely secure, and we cannot guarantee absolute security.

12. Children

This website and the services described on it are aimed at adults. If you are under 18 and wish to enquire about our services, we would encourage you to do so with the involvement of a parent, guardian or trusted adult. Organisational training that involves under-18s (for example, in an education setting) is governed by a separate agreement with the commissioning organisation.

13. Changes to this policy

We may update this policy from time to time to reflect changes in our practices or in the law. The “Last updated” date at the top of this page shows when it was last revised.

14. Contact us

Questions about this policy or how we handle your data can be sent to bruce@brucegreenhalgh.com.