Privacy
PRIVACY POLICY
Last updated: 4 September 2026
Who we are
April Maria is the data controller for the personal information described in this policy. This means that April Maria decides why and how your information is used.
This policy applies when you:
visit this website;
submit an enquiry;
enquire about or receive therapy or coaching;
book or purchase a service, event or resource;
subscribe to marketing; or
otherwise interact with April Maria professionally.
Information we collect
Depending on how you use the website and services, we may collect:
your name and contact details;
information contained in enquiries and correspondence;
booking, appointment and attendance information;
payment, invoice and transaction records;
therapy or coaching intake information;
professional notes and service records;
newsletter and marketing preferences;
website, device and security information; and
cookie-consent choices.
Sensitive information
Therapy and coaching enquiries may include information about your:
physical or mental health;
relationships;
sex life;
sexual orientation;
gender identity;
racial or ethnic origin;
religious or philosophical beliefs; or
other personal circumstances.
This is known as special-category information and receives additional legal protection.
We will only process it where an appropriate legal condition applies. This may include your explicit consent, the provision of health or social care by a professional subject to confidentiality obligations, the establishment or defence of legal claims, safeguarding or protection of vital interests.
Why we use your information
We may use your information to:
respond to enquiries;
assess whether a service is appropriate;
arrange and provide therapy or coaching;
administer bookings, payments and purchases;
maintain appropriate professional records;
send newsletters where you have agreed to receive them;
operate and protect the website;
prevent fraud, spam and misuse;
manage complaints;
comply with legal, tax, insurance and professional obligations; and
respond to safeguarding or serious-risk concerns.
The legal bases we rely on include:
taking steps before entering into a contract;
performing a contract;
complying with a legal obligation;
pursuing legitimate business and professional interests;
protecting vital interests; and
consent, where required.
You can withdraw consent at any time. This will not affect processing that took place before consent was withdrawn.
Information you must provide
You are not generally required by law to provide personal information.
However, certain information may be needed to respond to an enquiry, assess suitability, arrange a service, process a payment or meet professional and legal responsibilities.
If you do not provide necessary information, we may be unable to provide the requested service.
Confidentiality
Therapy and coaching information is treated as confidential, subject to the terms explained when the service begins.
Relevant aspects of client work may be discussed with a suitably qualified professional supervisor. Identifying information will be minimised wherever practicable.
Information may be disclosed where:
you have authorised it;
disclosure is required by law or a court;
it is necessary to manage a complaint or legal claim;
there is a safeguarding concern; or
there is a serious and immediate risk of harm.
Only information reasonably necessary for the relevant purpose will be disclosed.
Who we share information with
Where necessary, information may be shared with:
website and hosting providers, including Framer;
email and productivity providers, including Google;
form, booking and video-call providers;
payment and accounting providers;
newsletter and email-marketing providers, including Klaviyo;secure storage and record-management providers;
communication providers, including WhatsApp where you choose to use it;
professional supervisors;
clinics or referral partners involved in a requested service;
insurers, accountants and legal advisers;
regulators, courts or public authorities; and
safeguarding, health or emergency professionals.
We do not sell or rent your personal information.
Information processed outside the United Kingdom
Some service providers process information outside the United Kingdom.
Framer states that its services are hosted through Amazon Web Services facilities in the United States. Information processed through the website, including form submissions and limited technical or security information, may therefore be processed or stored in the United States.
This does not mean that all therapy or coaching records are transferred outside the United Kingdom. Records stored separately from the website depend on the professional systems used for those records.
Where information is transferred internationally, an appropriate legal safeguard will be used. This may include UK adequacy regulations, approved contractual clauses, the UK International Data Transfer Agreement or another safeguard permitted by UK law.
Klaviyo states that its customer data is stored in the United States and that relevant transfers from the United Kingdom may rely on the UK Extension to the EU-US Data Privacy Framework or contractual safeguards.
Marketing
Newsletter subscriptions and email marketing are managed through Klaviyo. If you subscribe, your email address, subscription status and related engagement information may be processed by Klaviyo for this purpose. Submitting a general, therapy or coaching enquiry will not automatically add you to a marketing list. Marketing will only be sent where there is an appropriate legal basis. You can unsubscribe using the option provided in each marketing message. Limited information may be retained to ensure that an opt-out continues to be respected.
How long we keep information
Information is kept only for as long as reasonably necessary.
Usual retention periods are:
general enquiries that do not become client relationships: up to 12 months after the last meaningful contact;
therapy and coaching records: normally seven years after the final session or professional contact;
financial and tax records: normally six years after the relevant financial year;
marketing information: until you unsubscribe;
complaints and legal records: for as long as needed to resolve the matter and meet legal or insurance requirements; and
cookie information: for the periods described in the Cookie Policy.
Information may be retained for longer where required by law, a professional body, an insurer, a safeguarding matter or a legal claim.
Your rights
Depending on the circumstances, you may have the right to:
request access to your information;
correct inaccurate or incomplete information;
request deletion;
restrict how information is used;
object to certain uses;
receive certain information in a portable format;
withdraw consent; and
complain about how your information has been handled.
These rights are not absolute. A request may be limited where an exemption or legal requirement applies.
Identification may be requested before information is disclosed.
Cookies
The website may use cookies and similar technologies for essential functions, security, consent choices and optional features.
Further information is provided in the Cookie Policy and Cookie Settings.
Automated decisions
We do not use solely automated decision-making that produces legal or similarly significant effects about you.
Children
This website and the services described are intended for adults aged 18 or over.
We do not knowingly collect information from children through this website.
Complaints
If you have a concern about how your information has been handled, use the contact form below.
A data-protection complaint will be acknowledged within 30 days. It will be investigated without undue delay, and you will be kept informed of the outcome.
You may also complain to:
Information Commissioner’s Office
Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF
Telephone: 0303 123 1113
Changes to this policy
This policy may be updated when services, providers, data practices or legal requirements change.
The latest version will appear on this page with its revision date.
Contact
For privacy questions, rights requests or data-protection complaints: