Legal

Privacy Policy

1. Controller

The controller responsible for data processing on this website is:

Francesca von Wrede
Sole practitioner, United Kingdom
Email: therapy@francescavonwrede.com

2. General information

The protection of your personal data is important to me. I treat your personal data confidentially and in accordance with applicable data protection law, the UK GDPR and Data Protection Act 2018 and, for clients in the European Union, the EU GDPR, as well as the professional duty of confidentiality applicable to me as a psychotherapist, including the BACP Ethical Framework for the Counselling Professions.

3. Data collected when visiting this website

When you visit this website, the hosting provider automatically collects technical data in server log files (e.g. browser type, operating system, referrer URL, IP address, time of request). This data is used solely for the technical provision and security of the website and is not combined with other data sources. The legal basis is Art. 6(1)(f) GDPR (legitimate interest in the secure and error-free presentation of the website).

4. Hosting

This website is hosted via Lovable Cloud (based on Supabase). The servers are located in the European Union. A data processing agreement in accordance with Art. 28 GDPR is in place with the provider.

5. Contact by email

If you contact me by email, your details (name, email address, content of your message) will be used exclusively to process your enquiry. The legal basis is Art. 6(1)(b) GDPR (steps prior to entering into a treatment contract) or Art. 6(1)(f) GDPR (legitimate interest in responding to your enquiry). Your data will be deleted once it is no longer required for this purpose, unless statutory retention obligations apply.

6. Contact form

If you use the contact form on this website, the data you enter (name, email address, and the content of your message) is transmitted to the website's backend infrastructure (Lovable Cloud, based on Supabase, servers located in the European Union), stored there, and forwarded by email to therapy@francescavonwrede.com so that I can respond to your enquiry. The legal basis is Art. 6(1)(b) GDPR (steps prior to entering into a treatment contract) and Art. 6(1)(f) GDPR (legitimate interest in responding to enquiries). Data submitted via the form is retained only as long as needed to handle your enquiry and any resulting correspondence, and is then deleted unless statutory retention obligations apply. Please do not include highly sensitive medical information in your initial message.

7. Therapeutic treatment

If therapeutic treatment takes place, the processing of your health data is subject to the special provisions of Art. 9(2)(h) GDPR and the professional duty of confidentiality. You will receive separate patient information and a consent form before treatment begins.

8. Online sessions

Online sessions take place via a secure, end-to-end encrypted video platform. The specific platform and the applicable data processing agreement will be communicated to you separately before treatment begins.

9. Cookies and tracking

This website does not use cookies for tracking or analytics purposes. No analytics tools such as Google Analytics are used. No profiling takes place.

10. Your rights

You have the following rights regarding your personal data:

Right of access (Art. 15 GDPR)
Right to rectification or erasure (Art. 16, 17 GDPR)
Right to restriction of processing (Art. 18 GDPR)
Right to data portability (Art. 20 GDPR)
Right to object (Art. 21 GDPR)
Right to withdraw consent (Art. 7(3) GDPR)

You also have the right to lodge a complaint with a data protection supervisory authority. In the United Kingdom, this is the Information Commissioner's Office (ICO), www.ico.org.uk. If you are located in the European Union, you may also contact the supervisory authority of your place of residence.

11. Validity of this privacy policy

This privacy policy is currently valid. Changes to the website or to legal requirements may make updates necessary.