Laura Muldoon: Founder of Ramsbottom Therapy®

Last updated: 14 October 2026

Ramsbottom Therapy founded by Laura Muldoon, a Psychotherapist with over 20 years of experience. I hold senior accredited (SCoPEd, Column C), registered membership with the British Association of Counselling and Psychotherapy (BACP).  I am a registered Certified Transactional Analyst and a registered member with the United Kingdom Association of Transactional Analysis (UKATA) and the European Association of Transactional Analysis (EATA). I am also a BUPA verified registered consultant, a qualified Supervisor and a qualified teacher of Counselling and Psychotherapy.  

If you have any questions about how we handle your personal data, please contact us at laura@ramsbottomtherpay.co.uk

The GDPR is concerned with the personal information about you that I collect, store, and share. Your privacy is very important to me and you can be confident that your personal information will be kept safe and secure and only used for the purpose it was given to me. I am registered with the Information Commissioner's Office - Registration Ref:  ZA201838 

We collect and process the following types of personal data:

• Contact details — your name, address, telephone number, and email address
• Health and therapy-related information — presenting issues, relevant medical history, mental health history, current medications, and GP details where appropriate
• Session notes — records of our therapeutic work together, including observations and progress
• Contract and consent information — signed agreements and consent forms
• Enquiry details — information you submit via our website contact form
• Financial records — invoices and payment information

Important: Health and therapy-related information is classified as "special category data" under Article 9(1) of the UK GDPR. This type of data receives enhanced legal protection because of its sensitive nature, and we take additional care in how we collect, store, and process it.

We collect personal data directly from you:

• When you first contact us to enquire about therapy (by phone, email, or through our website contact form)
• During your initial assessment or intake session
• Throughout our ongoing therapeutic work together
• Through any correspondence between us, including emails and telephone calls

We do not collect data about you from third parties unless you have explicitly asked us to liaise with another professional on your behalf.

Under UK GDPR, we must have a valid legal reason (lawful basis) to process your personal data. Because we process both ordinary personal data and special category health data, we rely on two separate legal bases:

Article 6 basis (ordinary personal data):

Article 6(1)(b) UK GDPR — processing is necessary for the performance of the therapeutic contract between us. When you engage us for therapy, we enter into a contract, and we need to process your personal data to fulfil that contract.

Article 9 basis (special category health data):

Article 9(2)(h) UK GDPR — processing is necessary for the provision of health or social care treatment by a health professional. As a BACP registered accreditted psychotherapist, we are a health professional for the purposes of this provision.

The additional condition required under UK law is found in DPA 2018 Schedule 1, Part 1, paragraph 2 (health or social care purposes). This processing is carried out by a qualified psychotherapist who is bound by a duty of confidentiality under the BACP Ethical Framework for the Counselling Professions.

As a BACP registered accredited psychotherapist, we are required to attend regular clinical supervision. This is an essential part of maintaining safe and ethical practice.

During supervision, we may discuss our therapeutic work. When we do so:

• Your name and any identifying details are not shared with our supervisor
• We use anonymised or pseudonymised case material only
• Our supervisor is a qualified professional bound by the same confidentiality obligations as we are
• Our supervisor is bound by their own professional body's ethical framework

Supervision discussions focus on therapeutic approach and professional development, not on identifying individual clients.

A clinical will is a plan that ensures your records are handled appropriately if we become incapacitated, seriously ill, or pass away. I have an agreement in place should the need arise and your details will remain confidential and stored securely.  My Therapeutic Executor will have access, by password, to the names of anyone currently receiving therapy from myself, should the need arise to advise you of my death or incapacitation. This access will only be used in these extreme circumstances and for no other reason. 

We do not routinely share your personal data with anyone outside of our practice. However, we use the following third-party services to run our practice and website, which may process some of your data:

• GoDaddy — our website platform
• Microsoft 365 / Google Workspace — our website provider
• Microsoft Teams / Zoom — used for online therapy sessions where applicable

Each of these services is bound by a data processing agreement, and they process data only as necessary to provide their service. Links to their privacy policies are available on request.

Clinical supervision: As described above, we discuss anonymised case material with our clinical supervisor. No identifying information is shared. We never sell your personal data.

Some of the third-party services we use may transfer personal data outside the United Kingdom:

• GoDaddy (Ireland)
• Microsoft Teams (Microsoft Corporation, USA) — data may be transferred to the USA
• Zoom (Zoom USA) - data may be transferred to the USA

Where data is transferred to the USA, we rely on Standard Contractual Clauses (SCCs) or International Data Transfer Agreements (IDTAs) as appropriate safeguards, in accordance with UK GDPR Chapter V and the updated requirements of the Data (Use and Access) Act 2025.

The USA does not currently have a UK adequacy decision. You can request a copy of the relevant transfer safeguards by contacting us.

We keep your personal data only for as long as necessary. Our retention periods are:

Therapy records (adult clients): 7 years after our last session in line with the Limitation Act 1980 and standard professional indemnity insurance requirements.

Financial records: 5 years HMRC legal requirement.

Website enquiries (non-clients) 12 months (legitimate interest in responding to enquiries). 

After the applicable retention period, records are securely destroyed. Paper records are shredded, and electronic records are permanently deleted.

Under UK data protection law, you have the following rights regarding your personal data:

1. Right to be informed — to know how we use your data (this privacy policy fulfils this right)
2. Right of access — to request a copy of the personal data we hold about you (known as a subject access request)
3. Right to rectification — to ask us to correct any inaccurate data we hold about you
4. Right to erasure — to ask us to delete your data in certain circumstances (please note this may not apply where we are required to retain records for professional or insurance purposes)
5. Right to restrict processing — to ask us to limit how we use your data in certain circumstances
6. Right to data portability — to receive your data in a portable format in certain circumstances
7. Right to object — to object to certain types of processing
8. Rights related to automated decision-making — we do not use automated decision-making or profiling in our practice

To exercise any of these rights, please contact us at laura:ramsbottomtherapy.co.uk

Whenn you make a subject access request, under the Data (Use and Access) Act 2025 we will conduct a reasonable and proportionate search of our records. We will respond within one month of receiving your request.

You have the right to make a data protection complaint directly to us. If you are unhappy with how we have handled your personal data, please let us know.

You can submit a complaint at  https://ramsbottomtherapy.co.uk​ or contact us at laura@ramsbottomtherapy.co.uk. 

We take all complaints seriously and will respond promptly. If you are not satisfied with our response, you may escalate your complaint to the Information Commissioner's Office (ICO):

• Website: ico.org.uk
• Telephone: 0303 123 1113
• Address: ICO, Wycliffe House, Water Lane, Wilmslow, SK9 5AF

Everything you share in therapy is confidential. However, there are specific circumstances where we may need to break confidentiality:

• Risk of serious harm — if we believe you or someone else is at immediate risk of serious harm
• Safeguarding concerns — if we become aware of concerns about the safety of a child or vulnerable adult
• Legal requirement — if we receive a court order requiring disclosure

We will always try to discuss any potential breach of confidentiality with you first, unless doing so would itself put someone at risk. Where possible, we will only share the minimum information necessary.

We review this privacy policy annually and whenever our practices change significantly.

If we make any significant changes to how we handle your personal data, we will inform you directly.