Privacy Policy and GDPR

Last updated: June 2026

This Privacy Notice explains how I, Anne Gibbard (also known as Anne Booth Counselling Development (ABCD) and Be All of You), collect, use, store and protect your personal information when you use my services, visit my website, or contact me.

I am committed to protecting your privacy and handling your personal information responsibly, transparently and securely.

I may update this Privacy Notice from time to time to reflect changes in legislation, professional requirements, or the services I offer. The most current version will always be available on my website.

Who is responsible for your information?

For the purposes of UK GDPR and the Data Protection Act 2018, Anne Gibbard is the Data Controller.

Contact details:

Anne Gibbard
Be All of You
Email: anne@heliostestingdomain.uk
Telephone: 07843 782708
Website: www.beallofyou.co.uk

What information may I collect?

Depending on the service you access, I may collect:

• Name, address, telephone number and email address
• Emergency contact details where appropriate
• Information relevant to therapy, supervision, coaching, training or personal development services
• Information shared through website enquiries, emails, telephone calls or online booking systems
• Financial information required for invoicing and accounting purposes
• Information necessary for safeguarding, risk assessment or professional record
• The keeping of information shared during personal development, tarot, astrology and numerology consultations is treated in the same confidential manner as other services unless different arrangements are stated

If you visit my website, I may also collect:

• IP address
  • Browser type and version
  • Operating system and device information
  • Website usage information
  • Pages visited and time spent on the site
  • Information collected through cookies and analytics tools

How do I use your information?

I use your information to:

• Provide therapy, supervision, coaching, training, workshops and related services
  • Communicate with you regarding appointments and enquiries
  • Maintain professional records
  • Meet ethical, legal and professional obligations
  • Process payments and maintain financial records
  • Improve my website and services
  • Maintain the safety and security of my business and website

Lawful basis for processing

Under UK GDPR, I process personal information under one or more of the following lawful bases:

• Contract – where information is necessary to provide a service you have requested
  • Legitimate Interests – for the effective management of my practice and professional services
  • Legal Obligation – where I am required to comply with legal or regulatory requirements
  • Vital Interests – where there is a serious risk of harm to an individual

Where information relating to physical or mental health is processed, this is considered Special Category Data and is processed in accordance with UK GDPR provisions relating to healthcare, professional services and safeguarding.

Confidentiality

Information shared with me is treated as confidential.

However, there may be circumstances where confidentiality may need to be breached, including:

• Where there is a serious risk of harm to yourself or another person
  • Safeguarding concerns involving children or vulnerable adults
  • Where disclosure is required by law or court order
  • Concerns relating to terrorism, money laundering or serious criminal activity
  • Professional or ethical obligations that require consultation

Where possible, I will seek to discuss any necessary disclosure with you first.

Professional Supervision

As part of ethical and professional practice, I regularly discuss my work in professional supervision.

Any information shared in supervision is anonymised wherever possible and supervisors are bound by professional confidentiality requirements.

Online Working

I may provide services using online platforms such as Microsoft Teams, Zoom, telephone or email.

These providers have their own privacy and security arrangements. While I take reasonable steps to use secure systems, no internet-based communication can be guaranteed to be completely secure.

How long do I keep your information?

Records are retained only for as long as necessary for professional, legal, insurance and regulatory purposes.

As a general guide:

• Therapy and supervision records are normally retained for seven years after the end of our work together
  • Financial records are retained in accordance with HMRC requirements
  • Website enquiries that do not become clients are periodically deleted
  • Training and workshop records are retained only as long as reasonably necessary

Records are securely destroyed when no longer required.

How is your information stored?

I take reasonable technical and organisational measures to protect personal information from unauthorised access, loss, misuse or disclosure.

Information may be stored electronically, in secure cloud-based systems, or in paper format where appropriate.

I work to ensure that any third-party providers I use meet appropriate data protection standards.

Cookies

My website uses cookies to improve your experience and help me understand how visitors use the site.

Cookies may be used to:

• Enable website functionality
  • Analyse website performance
  • Monitor visitor numbers and usage patterns
  • Improve website content and user experience

Where required, you will be given the option to accept or reject non-essential cookies.

Google Analytics

I use Google Analytics to help understand how visitors use my website.

Google Analytics collects information anonymously and provides statistical information about website usage. This helps me improve the website and the services I offer.

You can find further information about Google Analytics and how it uses data on Google’s website.

Links to Other Websites

My website may contain links to external websites.

I have no control over the content, privacy practices or security of external sites and encourage you to review their privacy policies before sharing personal information.

Your Rights

Under UK GDPR you have the right to:

• Access the personal information I hold about you
  • Request correction of inaccurate information
  • Request deletion of information where appropriate
  • Request restriction of processing
  • Object to certain types of processing
  • Request transfer of your information where applicable
  • Withdraw consent where consent is the basis for processing

Most requests will be responded to within one calendar month.

Data Protection Complaints

If you have any concerns about how your personal information has been collected, stored or used, please contact me in the first instance.

I will acknowledge and investigate complaints and aim to provide a response within one calendar month.

If you remain dissatisfied, you have the right to raise your concerns with the Information Commissioner’s Office (ICO).

Website: https://ico.org.uk
Telephone: 0303 123 1113

Contact

Questions, requests and comments regarding this Privacy Notice are welcomed.

Anne Gibbard
Data Controller
Email: anne@heliostestingdomain.uk
Telephone: 07843 782708
Website: www.beallofyou.co.uk