Privacy Policy

Last updated: 27/06/2026

I am committed to protecting your privacy and confidentiality. This Privacy Policy explains how I collect, use, store, and safeguard your personal information when you visit my website, contact me, or engage with me in relation to psychotherapy, supervision, consultation, or teaching.

I process personal information in accordance with UK data protection law, including the UK GDPR, the Data Protection Act 2018, the Privacy and Electronic Communications Regulations where applicable, and relevant amendments introduced by the Data (Use and Access) Act 2025.

1. Information I Collect

I may collect and process the following types of information:

Personal details that you provide, such as your name, email address, telephone number, and any information you choose to include when contacting me.

Information needed to arrange and provide therapy, supervision, consultation, or teaching.

Session records, which are held separately and securely, in line with professional, ethical, legal, and insurance requirements.

Sensitive or special category information that may arise in the context of psychotherapy, supervision, or related professional work. This may include information about health, psychological wellbeing, relationships, identity, sexuality, family history, trauma, or other personal matters you choose to share.

Administrative information, including appointment times, invoices, payment records, consent forms, and correspondence relating to the work.

Website data, such as anonymised or aggregated analytics, including pages visited and time spent on the website, where this is used to understand and improve website performance.

2. How I Use Your Information

I use your information only where there is a lawful basis for doing so. This may include providing a professional service, responding to enquiries, meeting legal and professional obligations, maintaining appropriate clinical and administrative records, managing appointments and invoices, and protecting your safety or the safety of others where necessary.

Your information may be used:

• To respond to enquiries about therapy, supervision, consultation, or teaching.

• To arrange appointments and provide services.

• To maintain appropriate clinical, supervisory, teaching, and administrative records.

• To meet professional, ethical, legal, insurance, and regulatory obligations.

• To communicate with you about appointments, invoices, or matters directly related to the work.

• To improve the website and the services offered.

• I do not use your personal information for automated decision-making, profiling, or direct marketing without your consent.

3. Sharing Your Information

Your information is never sold or shared with third parties for marketing purposes.

Information is treated as confidential and will only be shared in limited circumstances, such as:

• Where you have given clear consent.

• Where disclosure is required by law.

• Where there is serious concern about risk of harm to you or to another person.

• Where safeguarding duties apply.

• Where information is required for professional, legal, insurance, or regulatory purposes.

• Where I discuss aspects of clinical work in supervision, as required by professional standards. In supervision, identifying details are kept to the minimum necessary.

If communication with another professional involved in your care would be helpful, this will normally only happen with your knowledge and written consent, unless there is an urgent legal or safeguarding reason to act otherwise.

4. Data Storage and Security

Records are stored securely and in accordance with UK data protection law and professional requirements.

Session records are held separately from general correspondence wherever practicable.

Emails, texts, forms, and administrative records are stored securely and accessed only when necessary.

Website analytics, where used, are anonymised or aggregated as far as practicable and are not used to identify individual visitors.

I retain client information only for as long as necessary for professional, legal, ethical, insurance, and regulatory purposes.

When information is no longer required, it is securely deleted or destroyed.

5. Your Rights

Under UK data protection law, you have rights in relation to your personal information. These may include the right to:

Access the information I hold about you.

Request corrections or updates to inaccurate or incomplete data.

Request deletion of your data, where this applies.

Request restriction of processing in certain circumstances.

Object to certain types of processing.

Withdraw consent where consent is the lawful basis for processing.

Complain about how your personal information has been handled.

Some rights may be limited where professional, legal, safeguarding, insurance, or regulatory obligations require information to be retained or processed.

If you wish to exercise any of your data protection rights, please contact me using the details below. I may need to verify your identity before responding to a request.

6. Data Protection Complaints

A data protection complaint is a concern about how I have collected, used, stored, shared, retained, or otherwise handled your personal information.

If you have a concern or complaint about how your personal information has been handled, you can raise this with me directly by email, post, or through any other usual means of contacting me. You do not need to use a specific form, although it is helpful if you clearly state that you are making a data protection complaint.

Where possible, please include:

• Your name and contact details.

• A description of your concern.

• Any relevant dates or correspondence.

• What outcome you are seeking, if you have one in mind.

I will acknowledge receipt of a data protection complaint within 30 days.

I will take appropriate steps to investigate the complaint without undue delay, make reasonable enquiries, keep you informed where appropriate, and tell you the outcome without undue delay.

If a complaint is made by someone acting on your behalf, I may need to verify that they have authority to act for you. If I have reasonable doubts about identity, I may ask for appropriate proof of identity before discussing or disclosing personal information.

I will keep a record of data protection complaints, the steps taken, the outcome, and any remedial action. Complaint records will be retained only for as long as necessary in line with legal, professional, insurance, and regulatory obligations.

If you remain dissatisfied with how your data protection complaint has been handled, you have the right to raise the matter with the Information Commissioner’s Office.

7. Cookies, Analytics, and Google Ads

This website may use cookies, pixels, tags, or similar technologies for basic website functionality, security, analytics, and advertising measurement.

Some cookies are necessary for the website to function properly. Other cookies, such as analytics or advertising cookies, are only used where this is permitted by law and, where required, with your consent.

I may use Google Analytics to understand how visitors use the website, such as which pages are visited, how long visitors spend on the site, and how people arrive at the website. This information helps me understand and improve the website. Google Analytics data is used in aggregated or statistical form and is not intended to identify individual visitors.

I may occasionally use Google Ads to advertise psychotherapy services through Google Search. Where Google Ads is used, cookies or similar technologies may help measure whether an advert has led to a website visit or other interaction, such as viewing particular pages. This is known as conversion tracking.

I do not use enhanced conversions, and I do not upload client lists, enquiry lists, email addresses, telephone numbers, or other contact details to Google Ads for advertising purposes.

I do not use Google Ads remarketing or retargeting for psychotherapy services. This means I do not intentionally use Google Ads to show adverts to people simply because they have previously visited this website.

I do not use Google Ads to make decisions about individual clients, and I do not use advertising data as part of clinical assessment, therapy, supervision, or record keeping.

Because psychotherapy is a sensitive and confidential service, I aim to use advertising and analytics tools cautiously and proportionately.

You can accept, reject, or manage non-essential cookies through the cookie banner on this website. You can also manage or delete cookies through your browser settings. If you reject or disable non-essential cookies, the website should still remain usable, although some analytics or advertising measurement functions may not operate.

For more information about how Google uses information from sites or apps that use its services, you can visit Google’s own privacy and advertising information pages.

8. Cookies

This website may use cookies or similar technologies for basic functionality, security, website performance, and anonymised or aggregated analytics.

Cookies help the website function properly and may help me understand how visitors use the site so that it can be improved.

Where cookies or similar technologies require consent, this will be requested in accordance with applicable law. Where cookies are used only for limited, low-risk purposes permitted by law, such as certain statistical or functionality purposes, consent may not be required, but clear information will still be provided.

You can manage or disable cookies through your browser settings. Some parts of the website may not function properly if cookies are disabled.

9. Contact

If you have questions about this policy, wish to exercise your data protection rights, or want to raise a concern about how your data is handled, please contact:

Giovanni Felice Pace
Email: giovannifelice.pace@gmail.com
Website: gfpace.com

If you are not satisfied with how your data is handled, or with the outcome of a data protection complaint, you also have the right to raise concerns with the Information Commissioner’s Office in the UK.

The Information Commissioner’s Office is the UK regulator for data protection matters.