Privacy Policy

Little Roots Wellbeing is a private children's emotional support service operated by Coral Mitchell (referred to as "I", "me" or "Coral" throughout this policy). I am the data controller responsible for your personal data.

📧 Contact: littlerootswellbeing@gmail.com

I collect and process the following personal information:

From parents and carers

• Name and contact details (email address, phone number)
• Information about your child's needs, background and presenting concerns
• Appointment and session details
• Payment information (processed securely — I do not store card details)

About children

• First name and age
• School year and relevant background information
• Session notes and progress records
• Any disclosures or safeguarding-related information

I collect and use your information for the following purposes:

• To deliver safe, appropriate and tailored support sessions
• To communicate with you about appointments, progress and updates
• To fulfil my safeguarding duties and legal obligations
• To maintain accurate session and progress records
• To process payments for sessions

The legal bases for processing this data are performance of a contract (delivering the service you have requested), legitimate interests (maintaining accurate records to provide effective support) and legal obligation (safeguarding duties).

All personal data is stored securely using password-protected systems. I do not use paper records for sensitive information. Session notes and records relating to children are stored separately from general business records.

I will never sell, share or transfer your personal data to third parties for marketing purposes. Data may be shared with statutory agencies (such as children's social care or the police) only where there is a safeguarding concern or legal obligation to do so.

The Little Roots Wellbeing website is built and managed on my behalf by WAT Websites Ltd. As the technical operator of the site they act as a data processorunder UK GDPR — meaning they may have access to information you submit through the contact form (such as your name, email, phone number, your child's age range and your message) for the limited purpose of building, maintaining and supporting the site. They process this data only on my instructions and are bound by a duty of confidentiality.

A small number of carefully chosen technology providers (for hosting, secure form storage and image delivery) help run the site behind the scenes. None of them use your data for advertising and none sell it on. If you would like the names of these providers, or to see the full list of sub-processors, please email me and I will be happy to share them.

If you would prefer not to share contact details through the website, you are very welcome to email Coral directly instead.

• General client records are kept for 7 years following the end of the working relationship
• Records relating to children are kept until the child reaches the age of 25, or for 7 years, whichever is longer
• Safeguarding records are kept for a minimum of 7 years
• Financial records are kept for 6 years in line with HMRC requirements

Under UK GDPR you have the right to:

• Access the personal data I hold about you or your child
• Request correction of any inaccurate data
• Request deletion of your data (subject to legal obligations)
• Object to or restrict how I process your data
• Complain to the Information Commissioner's Office (ICO) at ico.org.uk if you believe your data has been mishandled

To exercise any of these rights please contact me at littlerootswellbeing@gmail.com.

The Little Roots Wellbeing website does not use tracking cookies or collect any personal data through the website itself, beyond what you choose to submit through the contact form.

The site uses a privacy-friendly analytics service that does not use cookies and does not collect personal data. It records anonymous, aggregated information about page views (such as which pages are visited and rough country) so I can understand how families are finding the site. No advertising tools are installed.

This privacy policy will be reviewed at least annually and updated where necessary. The date of the most recent review is shown at the top of this page.