Privacy Policy
Luca Sibilla Therapy
Last updated: 1st February 2026
1. Introduction
Your privacy matters to me. This Privacy Policy explains how I collect, use, and protect your personal information when you visit my website or contact me.
I am committed to working in line with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, and professional ethical standards for psychotherapists.
2. Who I Am
I am the data controller for this website.
Name: Luca Sibilla
Professional role: Psychotherapist
Practice name: Luca Sibilla Therapy
Location: United Kingdom
Email: luca@lucasibillatherapy.com
If you have any questions about how your data is handled, you are welcome to contact me using the details above.
3. What Personal Data I Collect
I collect only the minimum amount of personal data necessary.
This may include:
Your name
Your email address
Any information you choose to include when contacting me by email
If you become a client, additional personal and sensitive information will be collected and handled under a separate Client Privacy Notice, which will be provided to you directly.
4. How I Collect Your Data
Your data is collected when:
You contact me by email
You voluntarily provide information through my website
You accept cookies (see Cookies Policy below)
5. How I Use Your Data
I use your personal data only to:
Respond to enquiries
Communicate with you about my services
Arrange and manage appointments
Maintain appropriate professional records
I do not use your data for marketing purposes.
6. Lawful Basis for Processing
Under UK GDPR, the lawful bases I rely on include:
Legitimate interests – responding to enquiries and managing my practice
Consent – where you have chosen to contact me
Legal and professional obligations – in line with my ethical requirements
7. Confidentiality and Security
I take confidentiality seriously and use appropriate measures to protect your data, including:
Secure, password-protected devices
Secure email access
Limited access to personal information
Please note that email communication is not always fully secure. I recommend that you do not include highly sensitive personal information in an initial enquiry.
8. Sharing Your Data
I do not sell, rent, or share your personal data with third parties.
Information may only be shared if:
There is a legal requirement to do so
There is a serious risk of harm to you or others
I am required to do so by professional or ethical obligations
Any such disclosure would be handled carefully and appropriately.
9. Data Retention
Enquiry emails are kept only for as long as necessary to respond and manage contact
Client records are retained securely in line with professional, ethical, and legal requirements, which are explained in the Client Privacy Notice
10. Your Rights
Under UK GDPR, you have the right to:
Access the personal data I hold about you
Request correction of inaccurate data
Request erasure of your data (where applicable)
Object to or restrict processing
Make a complaint to the Information Commissioner’s Office (ICO)
ICO website: https://ico.org.uk
11. External Links
This website may include links to external websites. I am not responsible for their content or privacy practices.
12. Changes to This Policy
This Privacy Policy may be updated occasionally. Any changes will be published on this page with an updated date.