Privacy Policy

This website is operated by Matt Thomas trading as Bulbarrow Consultants. Matt Thomas is the Data Controller for the purposes of the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

If you have any questions about this policy or about how your data is handled, please contact us at:

This policy explains what personal data we collect when you use this website, how we use it, the legal basis on which we process it, and your rights under UK data protection law.

Bulbarrow Consultants provides private crisis support, addiction case management, coaching, and conflict resolution services. Because of the nature of these services, any information you share with us, including through our contact form, may include sensitive health-related or personal information. We treat all such information with the utmost care and confidentiality.

Contact form enquiries

When you submit an enquiry through this website, we collect:

• Your name
• Your email address
• Your telephone number (if provided)
• The content of your message

Depending on the nature of your enquiry, you may also share information about your health, wellbeing, or personal circumstances. This constitutes special category data under Article 9 of the UK GDPR and is subject to additional protections, as described below.

Website usage data

This website uses Google Analytics 4 (GA4) to collect anonymised data about how visitors use the site, including pages viewed, approximate session duration, and traffic source. This data does not identify you personally and is processed by Google LLC under their data processing terms. IP addresses are anonymised before storage. You may opt out via your browser's privacy settings or a browser extension such as the Google Analytics Opt-out Add-on. Standard server logs may also record your IP address and browser type as part of routine website operation; this is not retained beyond normal operational purposes.

We process your personal data on the following legal bases under the UK GDPR:

We use the personal data you provide to:

• Respond to your enquiry
• Assess whether and how we may be able to help you
• Deliver the services you have requested
• Maintain records necessary for the provision of professional services
• Comply with our professional and legal obligations

We do not use your information for marketing purposes. We do not send unsolicited emails, newsletters, or promotional communications. We do not sell, rent, or share your personal data with third parties for their own commercial purposes.

Health information, information about addiction or substance use, mental health information, and other data relating to your physical or psychological wellbeing is classified as special category data under Article 9 of the UK GDPR.

We handle this data with the highest standard of care and confidentiality. It is processed only for the purpose of providing the professional services you have requested, and is never shared with third parties without your explicit consent except where we are legally required to do so or where there is a serious and immediate risk to life.

All work undertaken by Bulbarrow Consultants is governed by the EMCC Global Code of Ethics, which places strict obligations of confidentiality on practitioners.

We retain enquiry data for a period of two years from the date of last contact. If you become a client, we retain case-related records for seven years from the end of the engagement, in accordance with professional practice standards.

After these periods, data is securely deleted. You may request earlier deletion at any time, see your rights below.

We do not share your personal data with third parties except in the following circumstances:

• With your explicit consent, for example, if coordinating with a clinical provider you have agreed we may involve.
• Where legally required, for example, in response to a lawful request from law enforcement or a regulatory authority.
• Where there is a serious and immediate risk to life, in which case we may share information with emergency services without your prior consent.
• Service providers, we use third-party services to operate this website and deliver email communications. These providers act as data processors under our instruction and are contractually bound to process data only on our behalf and in accordance with UK GDPR requirements.

Where data is processed by service providers outside the UK, we ensure that appropriate safeguards are in place, including Standard Contractual Clauses approved by the Information Commissioner's Office (ICO), in accordance with Article 46 of the UK GDPR.

Under UK data protection law, you have the following rights:

To exercise any of these rights, please contact us at matt@bulbarrowconsultants.com. We will respond within one calendar month.

If you are unhappy with how we have handled your personal data, you have the right to make a complaint to the Information Commissioner's Office (ICO), the UK's supervisory authority for data protection matters.

ICO website: ico.org.uk
ICO helpline: 0303 123 1113

We would, however, always prefer the opportunity to address your concerns directly before you contact the ICO. Please reach out to us first.

This website uses cookies set by Google Analytics 4 to support anonymised usage measurement. These cookies (typically _ga and _ga_*) do not contain personally identifiable information. They are used solely to distinguish visitors and sessions for statistical purposes and expire after two years.

Your browser may also store technical session data as part of normal website operation. This is not used to identify you personally. You may disable or delete cookies through your browser settings at any time; doing so will not affect your ability to use this website.

We may update this privacy policy from time to time. The date at the top of this page indicates when it was last revised. Significant changes will be noted prominently. Continued use of the website after a change constitutes acceptance of the revised policy.