Privacy Policy
Last updated: 1 June 2026
Introduction
Welcome to Michelle Wells’ Privacy Policy. I am committed to protecting your privacy and handling your personal information carefully, lawfully, and confidentially.
This policy explains how your personal information is collected, used, stored, and protected when you visit this website, contact me through it, or otherwise communicate with me in connection with therapy, supervision, or related services. It also explains how cookies and similar technologies may be used on this website.
This policy is intended to reflect the requirements of the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, and, where relevant, the Privacy and Electronic Communications Regulations (PECR).
If anything in this policy is unclear, or if your questions are not fully answered here, please feel welcome to get in touch.
Who I am
Michelle Wells is the data controller and is responsible for your personal data. If you have any questions about this policy or how your information is handled, you can contact me at hello@drmichellewells.co.uk. You also have the right to complain to the Information Commissioner’s Office (ICO) if you are unhappy with how your personal data has been handled.
The data I may collect about you
I may collect, use, store, and process the following personal data:
Identity data: This may include your name.
Contact data: This may include your email address, telephone number, and any contact details you choose to provide.
Enquiry data: This includes any information you include in your message when you contact me through the website or by email.
Website and cookie data: This may include limited information collected through cookies or similar technologies to help the website function properly, keep it secure, and understand how it is used. This website platform may use cookies and similar technologies for essential, functional, and analytics purposes. Under PECR, strictly necessary cookies do not require consent, but non-essential cookies generally do.
I do not ask you to provide more personal information than is reasonably necessary through this website.
How your personal data is collected
I use different methods to collect personal data from and about you, including:
Direct interactions
You may give me your personal information when you:
complete a contact form;
email me directly;
ask about therapy, supervision, or related services;
Otherwise, communicate with me through the website or by email.
Automated technologies or interactions
As you interact with this website, certain limited technical information may be collected automatically through cookies or similar technologies used by the website platform or related tools. This may include information about how the website is accessed and used.
How I use your personal data
I will only use your personal data when the law allows me to do so. Your information may be used for the following purposes:
to respond to your enquiry;
to communicate with you about therapy, supervision, or related services;
to maintain the security and proper functioning of the website;
to understand how the website is used and improve it where appropriate;
to comply with legal, regulatory, insurance, or professional obligations.
Lawful bases
Under the UK GDPR, organisations must identify the lawful basis they rely on for processing personal data. Depending on the circumstances, I may rely on one or more of the following:
where it is necessary to take steps at your request before entering into a contract;
where it is necessary for my legitimate interests in running my website and professional services;
where it is necessary to comply with a legal obligation;
where you have given consent, where consent is required.
Where special category personal data is processed, such as health-related information you choose to share, an additional condition under data protection law is also required. ICO guidance on special category data is under review following legal changes introduced in 2025, so I will continue to review this policy and update it where necessary.
Cookies
This website uses cookies to help it function properly and to provide a good experience for visitors. Cookies are small text files placed on your device when you visit a website. Some cookies are strictly necessary for the website to work. Others may be used to understand how visitors use the site or to improve its performance. Under PECR, strictly necessary cookies do not require consent, but non-essential cookies generally do. If non-essential cookies are used on this website, you will be given the option to accept, decline, or manage them through the cookie banner. You can also control cookies through your browser settings, although disabling some cookies may affect how the website works.
For more information, please also refer to the Cookie Policy on this website.
Sharing your information
I may share your information where necessary with trusted service providers involved in running this website, such as Squarespace, email providers, or other technology services used to support the website and communications. I may also share information where required to do so by law, court order, safeguarding duty, insurance requirement, or other professional obligation. Where information is shared, I will seek to ensure that it is limited to what is reasonably necessary in the circumstances.
International transfers
Some website providers or third-party tools may store or process personal data outside the United Kingdom. Where relevant, appropriate safeguards will be relied upon in relation to any such transfers, in line with applicable data protection law.
Keeping your information safe
I take appropriate technical and organisational steps to keep your personal information secure and to reduce the risk of unauthorised access, loss, misuse, or disclosure. Data security applies to all aspects of personal data processing, not only cyber security.
How long your information is kept
I will only keep personal information for as long as reasonably necessary for the purpose for which it was collected, or to meet legal, professional, insurance, or regulatory requirements. Retention periods may vary depending on the nature of the contact or service involved.
Your legal rights
Under data protection law, you have rights in relation to your personal data. These include the right to:
request access to your personal data;
request correction of inaccurate information;
request erasure in certain circumstances;
object to processing in certain circumstances;
request restriction of processing in certaincircumstances;
withdraw consent where consent is relied upon;
complain to the Information Commissioner’s Office (ICO).
To exercise any of these rights, please contact me at hello@drmichellewells.co.uk.
Subject access requests
You have the right to request a copy of the personal information I hold about you. This is sometimes known as a subject access request. A subject access request may be made in writing or verbally. To make a request, please contact me at hello@drmichellewells.co.uk.
I may need to ask for information to help confirm your identity and locate the information requested. This is to help protect your personal data and ensure that information is only disclosed to the right person.
Personal data breaches
I take data security seriously and have measures in place to respond to personal data breaches. If a personal data breach occurs, it will be assessed promptly. Where required by law, breaches will be reported to the ICO without undue delay and, where feasible, within 72 hours. If a breach is likely to result in a high risk to your rights and freedoms, you will also be informed without undue delay. A record of relevant breaches will be kept in accordance with legal requirements.
Third-party links
This website may include links to third-party websites. I am not responsible for the privacy policies, content, or practices of those websites. If you visit a third-party website, I encourage you to read its privacy policy before providing any personal information.
Contact
If you have any questions about this Privacy Policy or how your information is handled, please contact:
Michelle Wells
Email:hello@drmichellewells.co.uk
You also have the right to complain to the Information Commissioner’s Office
Location
I offer therapy sessions online and in person at the Dragonfly Centre, 34 Mannamead Road, Plymouth PL4 7AF. The centre provides calm, private consulting rooms, offering a safe and supportive environment for therapy.