Last updated: October 2026 (statistics without cookies, fonts served from our own server).
The data controller is Katarzyna Dębowska, running a therapeutic practice in Glasgow. Contact: kasia@debowska.co.uk, telephone 07513 020432.
The site is entirely static. There is no contact form, no user account and no shopping basket.
We do not use cookies. The site stores nothing on your device and uses no third-party analytics tools. There is no Facebook pixel, no remarketing and no advertising profiling.
The server hosting the site (Firebase Hosting, Google) records standard access logs, including IP address, browser information, the page address and the approximate location derived from the IP address. They are used to run and secure the service and for simple visit statistics: how many people visit, which pages are useful, where visitors come from and how many people clicked the phone number or email address. When you click one of them, your browser sends an empty request to the server, with no cookies and no identifier.
Logs with IP addresses are kept for up to 30 days. In the statistics database (Google BigQuery in the European Union) the IP address is replaced with an encrypted hash (a pseudonym) from which the IP address cannot be read. That data and the totals are kept without a time limit. The statistics are run on the controller’s behalf by AMO EC sp. z o.o. (Poznań, Poland), which maintains the site. The legal basis is legitimate interest (Art. 6(1)(f) UK GDPR): knowing how the website performs. You can object by writing to the address above, and your IP address will be excluded from the count.
The map on the contact page loads only after you click it. Until then Google receives no data and sets no cookies. Once loaded, Google’s terms for Google Maps apply.
If an analytics tool that sets cookies is added in future, it will only run after a consent banner is shown, and this document will be updated at the same time.
When you call or write, you provide your name, phone number or email address, and whatever else you choose to share.
If therapeutic work begins, the rules on records, confidentiality and its limits are agreed separately and in writing, in the contract made at the first session. Records of therapeutic work are kept separately from this website and are in no way connected to it.
Data is never sold or passed on for marketing purposes. The only recipients are technical service providers: the website host (Google, Firebase Hosting) and the email provider. This involves transferring data outside the United Kingdom, under the standard safeguards provided for in law.
You have the right to access your data, to have it corrected or erased, to restrict or object to processing based on legitimate interest, and to data portability.
To exercise these rights, write to kasia@debowska.co.uk.
You also have the right to lodge a complaint with the UK supervisory authority, the Information Commissioner’s Office (ico.org.uk).