Privacy policy

Last updated: September 2026.

Who is responsible for your data

The data controller is Katarzyna Dębowska, running a therapeutic practice in Glasgow. Contact: kasia@debowska.co.uk, telephone 075 130 20 432.

This website does not collect data on its own

The site is entirely static. There is no contact form, no user account and no shopping basket.

We do not use cookies. The site stores nothing on your device and uses no analytics tools. There is no Facebook pixel, no remarketing and no advertising profiling.

The server hosting the site (Firebase Hosting, Google) records standard access logs, including IP address and browser information. These are used solely to run and secure the service.

The site uses fonts served by Google Fonts, which means that when the page loads, your IP address is sent to Google’s servers.

The map on the contact page loads only after you click it. Until then Google receives no data and sets no cookies. Once loaded, Google’s terms for Google Maps apply.

If an analytics tool is added in future, it will only run after a consent banner is shown, and this document will be updated at the same time.

Data you provide when getting in touch

When you call or write, you provide your name, phone number or email address, and whatever else you choose to share.

• Purpose: replying to your message and arranging an appointment.
• Legal basis: steps taken prior to entering into a contract, and the legitimate interest of maintaining correspondence (Art. 6(1)(b) and (f) UK GDPR).
• Retention: correspondence that does not lead to work beginning is deleted after 12 months.

Data relating to people in therapy

If therapeutic work begins, the rules on records, confidentiality and its limits are agreed separately and in writing, in the contract made at the first session. Records of therapeutic work are kept separately from this website and are in no way connected to it.

Who data is shared with

Data is never sold or passed on for marketing purposes. The only recipients are technical service providers: the website host (Google, Firebase Hosting) and the email provider. This involves transferring data outside the United Kingdom, under the standard safeguards provided for in law.

Your rights

You have the right to access your data, to have it corrected or erased, to restrict or object to processing based on legitimate interest, and to data portability.

To exercise these rights, write to kasia@debowska.co.uk.

You also have the right to lodge a complaint with the UK supervisory authority, the Information Commissioner’s Office (ico.org.uk).