This Privacy Policy explains how Dr Sona Kaur (“I”, “me”, “my”) collects, uses, stores, and protects your personal data when you visit this website. This website is a professional profile site used to promote speaking engagements, media appearances, and PR opportunities. It is not a clinical or patient-facing website and no clinical services are offered or accessed through it.
This website does not collect, store, or process any clinical, medical, or therapeutic data. If you are seeking clinical services from Dr Kaur, please contact her practice directly. Any clinical data is handled separately under the data protection policies of the relevant clinical setting.
1. Who I Am
Dr Sona Kaur is a Clinical Psychologist and Neurodiversity Specialist. This website is operated as a personal professional profile for PR, media, and speaking engagement purposes.
Website: www.drsonakaur.com/
PR and Media Enquiries: lianne@unfolded-content.com (Unfolded Content — PR representative)
Direct contact: dr.sonakaur@serenitypsychologicalservices.co.uk
For any questions about this policy or to exercise your data protection rights, please contact me at the email address above or via my PR representative.
2. What This Website Is For
This is a professional PR and profile website. Its purpose is to:
- Showcase Dr Kaur’s professional background, expertise, and publications
- Attract speaking engagement and media opportunities
- Allow event organisers, journalists, and media professionals to make enquiries
This website does not offer clinical services, accept patient referrals, or process any health or therapeutic data. Visitors seeking clinical services should contact Dr Kaur’s clinical practice directly.
3. What Personal Data I Collect
3.1 Enquiry & Contact Data
- Full name
- Email address
- Organisation or media outlet name (where provided)
- Any other information you voluntarily include in your enquiry message
3.2 Technical & Usage Data
- IP address (anonymised via GA4)
- Browser type and version
- Device type and operating system
- Pages visited, session duration, and referring URL
- Cookie identifiers (see Cookie Policy below)
I do not collect special category data (such as health, mental health, or clinical information) through this website and ask that you do not submit such information via the enquiry form.
4. How I Collect Your Personal Data
- Directly from you — when you complete the website enquiry form (powered by Elementor Pro) to request a speaking engagement or media collaboration
- Automatically — when you browse the website, Google Analytics 4 collects anonymised usage data, subject to your cookie consent
5. How I Use Your Personal Data & Lawful Basis
I process your personal data only where I have a valid lawful basis under UK GDPR:
| Purpose | Lawful Basis | Data Used |
| Responding to speaking engagement and media enquiries | Legitimate interests (Art. 6(1)(f)) | Identity, contact, communications data |
| Forwarding enquiries to PR representative (Unfolded Content) | Legitimate interests (Art. 6(1)(f)) | Identity and contact data |
| Analysing website usage to improve content and reach | Consent (Art. 6(1)(a)) via Complianz cookie banner | Anonymised technical and usage data |
| Maintaining website security | Legitimate interests (Art. 6(1)(f)) | Technical data, IP address |
| Complying with legal obligations | Legal obligation (Art. 6(1)(c)) | As required by law |
6. Enquiry Form — Elementor Pro
The website contact form is built using Elementor Pro. When you submit an enquiry, your name, email address, and message are stored in the WordPress database and automatically forwarded by email to my PR representative, Unfolded Content (lianne@unfolded-content.com), who manages speaking and media enquiries on my behalf.
Unfolded Content acts as a data processor in respect of enquiry data forwarded to them. They will use your contact details solely to respond to your enquiry and will not use them for any other purpose.
Please do not include sensitive personal information — including any clinical, medical, or mental health details — in your enquiry message. This website is not a clinical contact point.
Enquiry form submissions are retained for 3 years and then securely deleted.
7. Google Analytics 4
I use Google Analytics 4 (GA4) to understand how visitors engage with this website — which content is most viewed, how visitors find the site, and general audience demographics. This helps me understand the reach of my professional profile.
Key privacy protections in place:
- IP anonymisation is enabled by default in GA4 — full IP addresses are never stored
- Google Analytics only activates after you have given consent via the Complianz cookie banner
- Google Signals is disabled — no cross-device or advertising audience tracking
- Data sharing with Google products and services has been reviewed and minimised
GA4 data is retained for 26 months. Google LLC is US-based; transfers are covered by the UK-US Data Bridge. Google’s Privacy Policy: policies.google.com/privacy
8. Site Kit by Google
The Site Kit by Google plugin is installed on this website and connects Google Analytics, Google Search Console, and other Google services to the WordPress dashboard for reporting purposes. Site Kit does not independently collect personal data from website visitors beyond what is already collected by the connected Google services described above.
9. Rank Math SEO
Rank Math SEO is used to manage the technical SEO of this website. It does not collect personal data from visitors and does not set cookies on visitor devices. It operates entirely within the WordPress administration environment.
10. SiteGround Hosting & Security
This website is hosted by SiteGround (SiteGround Spain S.L.), which processes technical data including IP addresses as part of hosting, security (Security Optimizer), and performance (Speed Optimizer) services. SiteGround acts as a data processor under a Data Processing Agreement. Server logs are retained for up to 30 days.
SiteGround Privacy Policy: siteground.co.uk/privacy.htm
11. Sharing Your Personal Data
I do not sell your personal data. I may share it with the following parties where necessary:
- Unfolded Content (PR representative) — speaking and media enquiries are forwarded to lianne@unfolded-content.com for handling on my behalf
- Google LLC — Google Analytics and Site Kit (anonymised website usage data only)
- SiteGround Spain S.L. — website hosting, security, and performance
- Professional advisers — solicitors or accountants where legally required
- Regulatory authorities — the ICO or other bodies where required by law
I require all parties who process data on my behalf to handle it securely and in accordance with UK GDPR.
12. International Transfers
Google LLC is based in the United States. Transfers of personal data to Google are covered by the UK-US Data Bridge and Google’s standard contractual clauses. SiteGround operates data centres within the EU/EEA. Unfolded Content is UK-based.
You may request further information about international transfer safeguards by contacting me.
13. Data Retention
- Enquiry form data: 3 years from date of submission, then securely deleted
- Email correspondence: 3 years from last contact
- Google Analytics data: 26 months (GA4 default)
- SiteGround server logs: up to 30 days
After the applicable retention period, personal data is securely deleted or anonymised.
14. Your Rights Under UK GDPR
You have the following rights regarding your personal data:
- Right of access — request a copy of personal data I hold about you
- Right to rectification — ask me to correct inaccurate or incomplete data
- Right to erasure — request deletion of your data in certain circumstances
- Right to restrict processing — ask me to pause processing in certain circumstances
- Right to data portability — receive your data in a portable format in certain circumstances
- Right to object — object to processing based on legitimate interests
- Rights related to automated decision-making — I do not carry out solely automated decision-making
To exercise any of these rights, please contact me at dr.sonakaur@serenitypsychologicalservices.co.uk or via Unfolded Content at lianne@unfolded-content.com. I will respond within one calendar month. I may need to verify your identity. There is no charge unless requests are manifestly unfounded or excessive.
15. Complaints
If you are dissatisfied with how I have handled your personal data, you have the right to complain to the Information Commissioner’s Office (ICO):
Information Commissioner’s Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF
Helpline: 0303 123 1113 | Website: ico.org.uk
I would welcome the opportunity to address your concern directly before you contact the ICO.
16. Data Security
I take appropriate technical and organisational measures to protect your personal data, including:
- SSL/TLS encryption across the website
- SiteGround Security Optimizer — firewall and brute-force protection
- Limit Login Attempts Reloaded — protects against unauthorised access to the WordPress admin
- Restricted access to personal data stored in WordPress
- Regular plugin and platform updates
In the event of a personal data breach likely to affect your rights and freedoms, I will notify the ICO within 72 hours and inform affected individuals without undue delay.
17. A Note on Professional Context
Dr Kaur is a registered clinical psychologist. Clinical work undertaken in NHS and private practice settings is governed by separate data protection policies applicable to those settings, including the relevant data controller’s own privacy notices (e.g. NHS Trust privacy notices for NHS work). This website policy applies solely to data collected through this PR and profile website.
18. Third-Party Links
This website may contain links to third-party websites including media outlets, event organisers, and professional networks. I am not responsible for their privacy practices and encourage you to read their privacy notices.
19. Changes to This Privacy Policy
I may update this Privacy Policy from time to time. The current version and its effective date will always be published on this website.
This Privacy Policy was last updated on 24 June 2026.