Privacy policy

Last updated: 26 February 2026

Who we are

This website is operated by Thoughtful Design Ltd (№15642102), a limited company registered in England and Wales with VAT number GB465435281. Our registered address is 82A James Carter Road, Mildenhall, England, IP28 7DE.

For any questions about this policy or how your data is handled, you can contact us at hello@alxm.me.

What personal data we collect

Counselling clients

When you enquire about or engage in counselling services, we may collect:

  • Your name, email address, and phone number (for booking and communication)
  • Appointment scheduling information (processed by Calendly)
  • Calendar invites containing your name and session time (sent via Google Calendar)
  • Payment and invoicing details (processed by Stripe and Xero)
  • Video session connection data (processed by Zoom)

We do not store digital clinical or therapeutic session notes. No records of session content are held electronically.

The legal basis for processing this data is contractual necessity (to provide the counselling service you have requested) and legitimate interest (to communicate with you about your enquiry).

Website visitors

This website does not use analytics, tracking scripts, or any form of behavioural monitoring. We do not collect personal data from visitors browsing this site.

Our hosting provider, Cloudflare, may process minimal technical data (such as IP addresses) in server logs for security and performance purposes. This processing is carried out under Cloudflare’s own privacy policy on the basis of legitimate interest.

Cookies and tracking

This website does not set any cookies and does not use any tracking technology. There are no first-party cookies, third-party cookies, or analytics scripts of any kind.

Third-party services

We use the following third-party services (subprocessors) in connection with our counselling practice:

Service Purpose Privacy policy
Cloudflare Website hosting and content delivery Privacy policy
Proton Mail Email communication Privacy policy
Google Calendar Session calendar invites Privacy policy
Calendly Appointment scheduling Privacy policy
Zoom Video counselling sessions Privacy policy
Stripe Payment processing Privacy policy
Xero Accounting and invoicing Privacy policy

Each service processes data in accordance with their own privacy policy. We only share the minimum data necessary for each service to fulfil its purpose.

Data retention

  • Financial records are retained for six years in accordance with HMRC requirements.
  • Email correspondence is retained for the duration of the therapeutic relationship and a reasonable period afterwards to handle any follow-up enquiries.
  • Appointment data is retained by Calendly in accordance with their own retention policies.
  • No digital clinical records are maintained. Therapeutic session content is not recorded or stored electronically.

Your rights

Under the UK General Data Protection Regulation (UK GDPR), you have the right to:

  • Access the personal data we hold about you
  • Rectify inaccurate or incomplete data
  • Erase your personal data (in certain circumstances)
  • Restrict the processing of your data
  • Data portability — receive your data in a structured, commonly used format
  • Object to the processing of your data

To exercise any of these rights, please contact us at hello@alxm.me.

If you are not satisfied with how we handle your data, you have the right to lodge a complaint with the Information Commissioner’s Office (ICO).

Changes to this policy

We may update this policy from time to time. The date at the top of this page indicates when it was last revised. We encourage you to review this policy periodically.