Privacy & cookies
Updated 25 October 2026
This notice explains how information is used when you visit this supervision website or make an enquiry.
Who is responsible?
Ross Cormack is responsible for the personal information used to respond to supervision and organisational enquiries. To ask a privacy question or exercise your rights, use the enquiry form and mark your message “Privacy request”. Please do not include identity documents or confidential client information in your initial message.
What information is collected?
The enquiry form asks for your first name, surname, email address and message. Anything you choose to include in your message is also collected. Please keep enquiries general: do not send identifiable information about clients, children or families, or detailed health information.
The hosting and security providers receive technical information needed to deliver and protect the website, such as your IP address, browser information, requested pages and request times. With your permission, this website also uses Google Analytics to understand how visitors use its pages. Advertising storage and personalisation are disabled in the website tag configuration.
Why information is used
Enquiry information is used to reply, discuss the support you are looking for and, where relevant, arrange work. For enquiries about entering an agreement with you, the lawful basis is taking steps at your request before entering a contract. For professional enquiries made on behalf of an organisation and routine correspondence, the basis is legitimate interests in responding and running the practice. Technical security processing supports the legitimate interest in keeping the website safe.
Permission to load the optional embedded form is separate from the lawful basis for responding to a message. You can withdraw that permission without withdrawing an enquiry already sent.
Who handles information?
The website is hosted through OpenAI Sites with Cloudflare infrastructure. Jotform provides the enquiry form and processes submitted information. Enquiries may also be held in the practice’s email account and related correspondence. The website itself has no separate enquiry database.
Jotform receives technical information when its form is loaded, even if you do not submit it. The embedded form stays blocked until you allow additional content. You can instead choose to open Jotform directly in a new tab; that is a visit to a separate service.
Provider information: OpenAI privacy policy, Cloudflare privacy policy and Jotform privacy policy. Providers may process information outside the UK. The Jotform account’s storage region, relevant contractual transfer safeguards and provider retention settings are still being reviewed; this notice does not claim that information stays only in the UK.
Visitor analytics
Google Analytics 4 is used to understand visits, pages viewed and engagement so the website can be improved. The lawful basis for this optional analytics processing is your consent. Google’s tag is not loaded unless you allow Analytics in Cookie settings, or choose Allow additional in the banner. You can allow the enquiry form while keeping analytics off.
Analytics can include cookie-based browser and session identifiers, page titles and addresses, referring website, visit times, engagement, browser, device, language and approximate location. Google receives connection information, including your IP address, when its service is contacted. Google states that GA4 does not log or store individual IP addresses. This is not a claim that the service receives no personal information.
This website is configured to send page addresses without query strings or fragments, and only the origin of a referring website. It does not deliberately send names, email addresses, enquiry messages or other form field values to Google Analytics. The Jotform iframe is a separate service. Google Signals and advertising personalisation are disabled in the tag configuration; no advertising consent is granted.
Google provides the analytics service and may process information outside the UK. See Google’s privacy policy and how Google uses information from partner sites. The property’s account-level data sharing, enhanced measurement, retention and contractual transfer settings still need to be checked by the account owner; this notice does not claim those settings have been audited.
You can switch Analytics off at any time using Cookie settings. This stops future analytics on this website, removes the first-party analytics cookies this tag creates and reloads the page if the tag has already run. It does not erase reports or data already received by Google. Contact Ross through the enquiry form for a data-rights request.
How long information is kept
My retention policy for enquiries that do not lead to ongoing work is up to six months after the last contact, unless a specific legal obligation or unresolved complaint requires longer retention. This covers enquiry submissions and related email correspondence. If we begin working together, the working agreement and any applicable practice privacy information explain the separate record-keeping arrangements.
Technical records and backups are subject to the providers’ retention arrangements. The Analytics cookies set by this website’s tag are configured for up to 183 days, without refreshing their expiry on every page load. Google Analytics user/event data retention is controlled separately in the Analytics property; that account setting has not yet been verified. Aggregated reports may be retained separately. Cookie choices on this website expire after six months. See below for the security cookie observed on this website.
Your rights
Depending on the circumstances, you can ask to access, correct or erase your personal information, restrict its use, object to processing based on legitimate interests, or receive a portable copy. These rights have conditions and exceptions. You may withdraw consent to optional content at any time through Cookie settings. Withdrawal does not undo earlier lawful processing or delete a form submission.
You can raise a concern with Ross using the enquiry form. You also have the right to complain to the Information Commissioner’s Office (ICO).
Cookies and browser storage
Essential storage supports security and remembers your choices. Additional content is off by default. Accepting or rejecting additional content does not prevent you reading the website.
Essential only blocks both Google Analytics and the embedded Jotform. You can switch the two optional services on or off independently. If a service has already loaded when you switch it off, this page reloads to stop it running. This website cannot remove cookies already stored on another provider’s domain; use your browser’s site-data controls to remove those. Opening the direct Jotform link takes you outside this website’s consent controls.
Scope and updates
This notice covers this supervision website and initial enquiries. It is not a substitute for the working agreement or a privacy notice covering ongoing clinical or supervisory records. It will be updated if the services or handling arrangements change.