Privacy and Your Information
Last updated: July 2026
I believe that trust begins long before we meet. Whether you're simply browsing the website, getting in touch for the first time, or beginning therapy with me, I want you to feel confident that your personal information is treated with the same care and respect as the conversations we share.
This Privacy Notice explains what information I collect, why I collect it, how I keep it safe, and the choices you have about your personal data. It has been written in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
Who is responsible for your information?
I am Ann Lowe, the owner, and Data Controller for the personal information I collect.
Email: [email protected]
Website: www.annlowe.co.uk
I am registered with the Information Commissioner's Office (ICO) as a Data Controller.
ICO Registration Number: ZC193058
You can view my registration on the ICO Register here.
Information I collect
The information I collect depends on how you interact with me.
If you contact me through my website or by email
I may collect:
- your name
- your email address
- your telephone number (if you choose to provide it)
- the information you include in your enquiry
I use this information simply to respond to your enquiry and, if appropriate, arrange an initial conversation.
If we begin working together
I may also collect:
- your address
- your date of birth
- emergency contact details
- GP details
- relevant health information
- information relating to the reasons you are seeking therapy
- assessment information
- brief therapy notes
- appointment records and correspondence
I only collect information that is relevant to providing safe, ethical and effective therapeutic support.
Why I collect your information
Your information helps me to:
- respond to enquiries
- arrange and manage appointments
- provide therapeutic support
- maintain accurate clinical records
- fulfil my professional and legal responsibilities
- meet safeguarding obligations where necessary
- improve my website and services
If you choose to join my newsletter, I will also use your email address to send occasional updates, reflections and information about my work. You can unsubscribe at any time using the link included in every email.
My lawful basis for processing your information
Under UK GDPR, I process personal information using one or more of the following lawful bases:
- Legitimate Interests, to respond to enquiries and operate my practice safely and effectively.
- Performance of a Contract, when providing therapy or other agreed services.
- Legal Obligation, where I am required to retain certain records or disclose information by law.
- Consent, where you have chosen to receive my newsletter or where consent is otherwise appropriate.
Where I process health information or other special category data, I do so because it is necessary for the provision of health and wellbeing support and in accordance with UK data protection legislation.
Confidentiality
Everything you share with me is treated with respect and kept confidential.
There are, however, a small number of situations where I may need to share information. These include circumstances where there is a serious risk of harm to yourself or someone else, where there are safeguarding concerns involving a child or vulnerable adult, or where disclosure is required by law or a court order.
Wherever possible, I will discuss this with you before any information is shared.
How your information is stored
I take appropriate steps to keep your information secure.
Depending on the type of information, this may include password-protected devices, encrypted electronic records, secure cloud storage and locked storage for any paper records.
Access to your information is restricted to me unless disclosure is required for legal, safeguarding or professional reasons.
How long I keep records
For adult clients, therapy records are generally retained for seven years after therapy has ended.
In some circumstances, records may need to be kept for longer to comply with legal, insurance or professional requirements. Once they are no longer required, they are securely destroyed.
Sharing your information
I will never sell or share your personal information for marketing purposes.
Information will only be shared where:
- you have given your consent
- it is necessary for safeguarding
- disclosure is required by law
- it is necessary to meet legal or insurance obligations
Cookies and website analytics
Like most websites, this site uses cookies to help it function properly.
I may also use website analytics to understand how visitors use the site. This information is anonymised wherever possible and helps me improve the website and the information I provide.
You can manage cookies through your browser settings and any cookie preferences available on this website.
Your rights
Under UK GDPR, you have the right to:
- access the personal information I hold about you
- ask for inaccurate information to be corrected
- request that your information is erased where this is legally possible
- object to or restrict certain types of processing
- request a copy of your information in a portable format
- withdraw your consent where processing relies on consent
Please note that there are occasions where I am legally required to retain certain records.
Questions or concerns
If you have any questions about how I handle your information, I hope you'll contact me first so that I can help.
If you remain unhappy with the way your personal information has been handled, you have the right to contact the Information Commissioner's Office.
Information Commissioner's Office
Website: www.ico.org.uk
Telephone: 0303 123 1113
Contact
If you have any questions about this Privacy Notice or the way your information is handled, please get in touch.
Ann Lowe