Privacy policy.

Last updated: 12 November 2025

This Privacy Policy describes how Sophie Barford (“I”, “my”, or “me”) collects, uses, and protects your personal data when you visit my website, www.sophiebarford.com (the “Site”), contact me, or use my services.

I are committed to protecting your privacy and handling your information in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

1. Who I Am

Data Controller:
Sophie Barford
Email: hello@sophiebarford.com
Website: www.sophiebarford.com

2. What Information I Collect

I may collect and process the following types of personal information:

Information you provide directly:

  • Your name, email address or phone number (e.g. via the contact form).

  • Information about your enquiry, such as the type of service you’re interested in.

  • If you engage in music therapy services, additional personal or health-related information may be collected with your explicit consent and handled in accordance with professional confidentiality standards.

Information I collect automatically:

  • Technical data such as your IP address, browser type, and device information.

  • Usage data such as pages visited, time spent on the site, and links clicked (via cookies or analytics tools).

3. How I Use Your Information

I use your personal data to:

  • Respond to your enquiries or booking requests.

  • Provide and manage my services.

  • Communicate with you about appointments, services, or updates.

  • Maintain records for professional and legal compliance.

  • Improve the Site and user experience.

4. Lawful Bases for Processing

I process your personal data under one or more of the following lawful bases:

  • Consent – when you have given clear permission for me to process your data (e.g. subscribing to a mailing list).

  • Contract – to provide the services you have requested.

  • Legal obligation – where I must comply with professional, legal, or regulatory requirements.

  • Legitimate interests – for improving services, communications, or site functionality, where your rights are not overridden.

5. How I Store and Protect Your Data

I take appropriate technical and organisational measures to protect your personal data from loss, misuse, or unauthorised access. This includes using secure passwords, encrypted storage and restricted access to sensitive information.

Data is stored within the UK or the European Economic Area (EEA). If data is transferred outside these regions, we ensure appropriate safeguards are in place.

6. Data Retention

I keep your personal data only for as long as necessary to fulfil the purposes we collected it for — including any legal, accounting, or reporting obligations. For clinical music therapy records, retention periods follow HCPC and BAMT professional standards (typically up to 7 years after therapy ends, unless otherwise required).

7. Sharing Your Information

I do not sell, rent, or trade your personal information.
I may share data with:

  • Professional partners or data processors who help operate this website or deliver services (e.g. hosting providers, email platforms) — all under confidentiality agreements.

  • Relevant authorities, if required by law or to protect your vital interests.

8. Your Data Protection Rights

Under UK data protection law, you have the right to:

  • Access your personal data.

  • Correct inaccuracies in your data.

  • Request deletion of your data.

  • Restrict or object to certain types of processing.

  • Withdraw consent at any time (where processing is based on consent).

  • Data portability, allowing you to obtain and reuse your data for your own purposes.

To exercise these rights, contact hello@sophiebarford.com. I will respond within one month.

9. Cookies

This Site may use cookies and similar technologies to improve your browsing experience and analyse website traffic. You can control or delete cookies through your browser settings. See my separate Cookies Policy for details.

10. Links to Other Websites

My Site may contain links to other websites. I are not responsible for the privacy practices or content of third-party sites. Please check their privacy policies before submitting personal data.

11. Children’s Privacy

This Site is not intended for children under 16, except where they are accessing services under the guidance of a parent or guardian. I do not knowingly collect personal data from children without appropriate consent.

12. Updates to This Policy

I may update this Privacy Policy periodically. Any changes will be posted on this page with an updated “Last updated” date. Please review this policy regularly to stay informed about how I protect your data.

13. Contact Me

If you have questions, concerns, or requests regarding this Privacy Policy, please contact:
Sophie Barford
Email: hello@sophiebarford.com

If you are not satisfied with my response, you have the right to lodge a complaint with the Information Commissioner’s Office (ICO) at https://www.ico.org.uk