Last updated: 18 September 2025
At Inner Grove AB, I take your privacy and confidentiality very seriously. This Privacy Policy explains how I collect, use, and protect your personal data in line with the UK General Data Protection Regulation (UK GDPR), the EU GDPR, and relevant data protection laws.
I am Annalaise (Anna for short) Gibbons, a trainee therapist at the Institute of Psychosynthesis in London. I am based in Stockholm, Sweden and provide therapeutic services under the name Inner Grove AB. If you have any questions about this policy or how I handle your data, you can contact me at: data@theinnergrove.org
Depending on how you interact with me, I may collect the following information:
Contact details: name, email address, phone number, and emergency contact information.
Booking details: preferred session times, information you enter when scheduling via Calendly for the intro call.
Therapy records: minimal notes necessary for therapy and training purposes.
Session recordings: audio recordings of in-person sessions (via dictaphone) or online sessions (via Zoom), with your prior consent. These are made for training and supervision purposes.
Payment details: I keep a record of payments made for sessions but I do not store card details myself; payments are processed securely by your payment provider (Swish or Wise)
Technical data: cookies and analytics (with your consent) to help improve my website.
When you contact me by email.
When you book a session via Calendly.
During sessions conducted via Zoom. All sessions are recorded for training purposes – see FAQs.
When you attend an in-person session, I will record audio using a dictaphone with your consent.
Through cookies when you browse my website (you can control these via the cookie banner).
I use your personal data to:
Arrange and provide therapy sessions.
Communicate with you about appointments, services, or changes.
Maintain secure records as required for my psychotherapy training and supervision, which may include session recordings used only for review, transcription of short excerpts, and supervisory discussion.
Comply with legal and ethical obligations.
I will never sell or share your data with third parties for marketing.
Under GDPR, I rely on the following lawful bases:
Contract: to deliver therapy services you request.
Consent: for cookies and for recording sessions for training purposes.
Legal obligation: to meet requirements set by my training body and professional standards.
Legitimate interests: to keep basic records for supervision and safeguarding.
Emails: held securely in an end-to-end encrypted provider.
Calendly bookings for introductory meetings: stored securely on Calendly’s platform (you can view their privacy policy here).
Session notes: stored in a secure system accessible only to me.
Session recordings: audio files are stored securely and are accessible only to me. Once I have written up the short transcript segments needed for supervision, the recordings are permanently deleted.
Zoom: used for online sessions. Zoom’s privacy policy is available here.
Cookies: stored on your device only if you consent via the cookie banner.
I keep therapy notes only for as long as required for my training and professional obligations, after which they are securely deleted.
You have rights under GDPR, including to:
Access the data I hold about you.
Request correction of inaccurate data.
Request deletion of your data (in some cases).
Restrict or object to how your data is used.
Withdraw consent (e.g. for cookies or recordings).
Lodge a complaint with the UK Information Commissioner’s Office (ICO) or your local data authority.
Everything you share in therapy is confidential. The only exceptions are if:
I believe there is a serious risk of harm to you or others.
I am legally required to disclose information (e.g. safeguarding, terrorism, money laundering).
In such cases, I would aim to discuss this with you first where possible.
My website uses cookies to improve your experience. Non-essential cookies (such as analytics) are only set with your consent, which you can manage via the cookie banner.
This policy may be updated occasionally. The latest version will always be posted on this page with the date of update.