PRIVACY POLICY

Meg Sharland
Trading as Meg Sharland
Norfolk, United Kingdom
Email: megssharland@gmail.com

Last updated: 29 September 2026

This Privacy Policy explains how I, Meg Sharland (“Meg”, “I”, “me” or “my”), collect, use, store and protect your personal information when you visit my website, contact me, book or purchase a service, access a recording or library, join a programme, or work with me privately.

I respect the personal nature of the information people may share with me and aim to collect only the information I reasonably need to provide my services and run my business.

1. WHO IS RESPONSIBLE FOR YOUR INFORMATION?

For the purposes of UK data protection law, Meg Sharland is the data controller for the personal information covered by this Privacy Policy.

If you have any questions about your personal information or this policy, you can contact me at:

megssharland@gmail.com

2. INFORMATION I MAY COLLECT

Depending on how you interact with me, I may collect information including:

• your name;

• email address;

• telephone number;

• postal address where you choose to provide it;

• booking and appointment information;

• information relating to a programme, recording, membership or library you have joined;

• purchase and transaction information;

• correspondence between us;

• forms, questionnaires or information you choose to complete before working with me;

• information you voluntarily share during our work together;

• feedback or testimonials where you choose to provide them; and

• technical information relating to your use of my website, where this is collected through cookies or similar technology.

Payment information is processed by the relevant payment provider. I do not need to receive or store your complete debit or credit card details in order to process an online payment.

3. INFORMATION YOU SHARE DURING 1:1 WORK

The nature of my work means you may choose to share personal information about your experiences, wellbeing, relationships, history or circumstances.

Some of this information may be considered sensitive or “special category” personal data under UK data protection law.

I treat this information with particular care and only use it where there is an appropriate lawful basis and, where required, an additional condition for processing special category information.

Please only provide information that is relevant to the work we are doing together.

Information shared during private sessions is treated confidentially, subject to circumstances where disclosure is required by law or where safeguarding or a serious risk of harm needs to be addressed.

4. HOW I USE YOUR INFORMATION

I may use your personal information to:

• provide a service, programme, recording or library you have requested;

• process and administer purchases;

• arrange and manage appointments;

• communicate with you before, during and after our work together;

• provide access to recordings, programme materials and resources;

• send information and resources that form part of a programme or service you have joined;

• respond to enquiries;

• maintain appropriate client, business and financial records;

• manage my website and digital services;

• meet my legal, accounting, insurance and regulatory responsibilities;

• protect the security and integrity of my business and services; and

• send marketing communications where I have an appropriate legal basis to do so.

I do not sell your personal information.

5. PROGRAMME, RECORDING, RESOURCE & LIBRARY EMAILS

When you purchase, request or sign up for one of my recordings, programmes, resources or libraries, I may send you emails that are part of providing that service.

These may include:

• access links and login information;

• recordings and resources;

• instructions or guidance;

• information relating to your programme;

• updates to your recording library;

• newly released recordings or resources included within the service you joined; and

• important administrative or service information.

These communications form part of delivering and supporting the service, programme, recording or library you have requested or purchased.

You may also occasionally receive emails about other Meg Sharland recordings, programmes, resources or services where I have an appropriate legal basis to send them.

You can unsubscribe from non-essential or marketing emails at any time by using the unsubscribe link provided in the email.

Unsubscribing from marketing communications will not necessarily stop essential communications that I reasonably need to send to provide, administer or give you access to something you have purchased, requested or are currently using.

6. MY LEGAL BASIS FOR USING YOUR INFORMATION

Under UK data protection law, I need a lawful reason for processing personal information.

Depending on the circumstances, I may process your information because:

• it is necessary to perform a contract with you or take steps at your request before entering into one;

• I have a legitimate business interest in doing so and your rights do not override that interest;

• you have given your consent;

• I have a legal obligation to process or retain the information; or

• another lawful basis applies.

Where I rely on consent, you can withdraw your consent at any time.

Withdrawing consent does not make processing that took place before you withdrew your consent unlawful.

Where information is considered special category personal data, I will only process it where an appropriate additional condition under data protection law applies.

7. WHO YOUR INFORMATION MAY BE SHARED WITH

I use trusted third-party services to help me operate my business and provide my services.

These currently include:

• Wix — website hosting, website functionality and online services;

• Calendly — appointment scheduling and booking;

• Mailchimp — email communications and delivery of relevant programme, recording and library communications;

• PayPal — payment processing; and

• Stripe — payment processing.

These providers may process personal information on my behalf or act as independent data controllers for certain information, depending on the service they provide.

Payment information is processed securely by the relevant payment provider. I do not need to receive or store your complete debit or credit card details in order to process an online payment.

I may also disclose personal information where I am legally required to do so, where necessary to protect someone's vital interests, in connection with safeguarding obligations, or where otherwise permitted or required by law.

I do not sell your personal information or give client information to unrelated companies for them to market their products or services to you.

8. INTERNATIONAL DATA TRANSFERS

Some of the technology companies I use may process or store personal information outside the United Kingdom.

Where personal information is transferred internationally, it will be handled in accordance with applicable UK data-protection requirements and appropriate safeguards will be used where required.

9. HOW LONG I KEEP INFORMATION

I keep personal information only for as long as reasonably necessary for the purpose for which it was collected and to meet applicable legal, professional, insurance, tax and accounting requirements.

Client case notes and associated records are normally retained for 8 years following the last interaction with an adult client.

Where I work with someone under 18, records may need to be retained for longer in accordance with applicable professional, legal and insurance requirements.

A longer retention period may also apply where required by law or my professional indemnity insurer, or where records are reasonably required in connection with an ongoing complaint, safeguarding matter or legal claim.

At the end of the applicable retention period, records are reviewed and, where there is no continuing lawful or professional reason to retain them, securely destroyed.

Other personal information is retained only for as long as reasonably necessary for the purpose for which it was collected or to comply with applicable legal and business requirements.

10. SESSION NOTES AND RECORDS

Most of my services and sessions are not recorded.

Where I make client notes, these are kept as paper records in individual client files and stored in a locked, secured cupboard within my private office. They are not accessible to clients, visitors or members of the public.

These records may contain information you have provided to me, relevant history, information about our work together and brief notes that I reasonably need for continuity, professional practice, safeguarding or record-keeping purposes.

Client records are treated as confidential personal information. Where they contain information concerning health or wellbeing, they may include special category personal data and are handled accordingly.

Client records are normally retained for 8 years following the last interaction with an adult client. Where a longer retention period applies because of the client's age, legal requirements, safeguarding considerations, an ongoing complaint or claim, or professional or insurance requirements, records may be retained for the appropriate additional period.

At the end of the applicable retention period, paper records are reviewed and, where there is no continuing lawful or professional reason to retain them, securely destroyed.

Group calls are only recorded where participants have been informed in advance that recording will take place.

I do not publish recordings, private information, case material or identifiable content from a client's private session without appropriate permission.

11. CONFIDENTIALITY

Information you share with me during private one-to-one work is treated confidentially.

I will not ordinarily share information about you or what you have discussed with me without your permission.

There may, however, be circumstances where information needs to be disclosed because I am required to do so by law or because there is a safeguarding concern or serious risk of harm to you or another person.

Where disclosure is necessary, I will only disclose information that is reasonably necessary in the circumstances.

12. TESTIMONIALS AND CLIENT EXPERIENCES

I will not publicly identify you or publish your private client information simply because you have worked with me.

Where you give me permission to use a testimonial, review, story, photograph, video or other identifiable material, I will use it in accordance with the permission you have given.

Where appropriate, I may ask for explicit written permission before identifiable client material is published.

13. CHILDREN AND YOUNG PEOPLE

My website, general digital recordings and online libraries are primarily intended for adults unless a particular service expressly states otherwise.

Where I work directly with someone under 18, appropriate arrangements regarding consent, confidentiality, safeguarding, record keeping and parental or guardian involvement will be considered according to their age and the nature of the service.

Records relating to children and young people may be retained for longer than adult client records where required by applicable professional, legal or insurance requirements.

14. KEEPING YOUR INFORMATION SECURE

I take reasonable organisational and technical measures to protect personal information against unauthorised access, disclosure, loss, misuse or alteration.

Paper client notes are stored in a locked, secured cupboard within my private office.

Digital information is handled through the systems and service providers I use to operate my business, with appropriate account and security measures used where available.

No online or physical storage system can be guaranteed to be completely secure. However, I take the privacy and confidentiality of client information seriously and review how information is handled as my business and technology change.

15. COOKIES AND WEBSITE INFORMATION

My website may use cookies or similar technologies to make the website function, remember preferences, understand how the website is being used or provide particular features.

Some cookies are necessary for the website to operate. Other cookies, such as analytics or marketing cookies, may require your consent.

Where consent is legally required for non-essential cookies, you should be given the opportunity to accept or reject them through the website's cookie settings.

16. YOUR DATA PROTECTION RIGHTS

Depending on the circumstances, UK data protection law gives you a number of rights relating to your personal information.

These can include the right to:

• ask what personal information I hold about you;

• request a copy of your personal information;

• ask me to correct inaccurate or incomplete information;

• ask for information to be deleted in certain circumstances;

• ask me to restrict the way information is processed in certain circumstances;

• object to certain processing;

• receive certain information in a portable format where applicable; and

• withdraw consent where processing is based on your consent.

These rights are not absolute. For example, I may sometimes be required to retain particular records despite a request for deletion because of legal, professional or insurance obligations.

To make a request regarding your personal information, email:

megssharland@gmail.com

I may need to confirm your identity before providing, deleting or changing personal information.

17. MARKETING & UNSUBSCRIBING

Where I send marketing communications, you can ask me to stop at any time.

You can do this by clicking the unsubscribe link within an email or contacting me directly at megssharland@gmail.com.

If you unsubscribe from marketing, I may retain limited information necessary to record your preference and make sure you are not added back to marketing communications unintentionally.

Choosing not to receive marketing does not prevent me from sending essential administrative or service communications relating to something you have purchased, booked, requested or are currently accessing.

18. COMPLAINTS

If you have concerns about how I have collected, stored or used your personal information, please contact me first so that I have the opportunity to address them.

You also have the right to raise a concern with the Information Commissioner's Office (ICO), the UK's independent data-protection regulator.

19. CHANGES TO THIS PRIVACY POLICY

I may update this Privacy Policy from time to time where my services, technology, business practices or legal obligations change.

The most recent version will be published on my website with the date it was last updated.

20. CONTACT

For questions about this Privacy Policy, your personal information or your data-protection rights, please contact:

Meg Sharland
Trading as Meg Sharland
Norfolk, United Kingdom
Email: megssharland@gmail.com

Last updated: 29 September 2026