Privacy Policy

I am Maria Loulaki, trading as Loulaki Consulting. I provide independent clinical governance, patient safety and quality improvement consulting. I am the controller of the personal information described in this policy, which means I decide how and why it is used.

This policy covers personal information I receive when you visit this website or contact me by email or phone.

This website does not use cookies and does not use analytics. If that changes, I will update this policy.

• Messages and details you send me by email, by phone or through the contact form on this website, such as your name, your role, your organisation, your contact details and anything you choose to tell me about your enquiry. When you use the contact form I receive the details you enter: your name, your email address and your message, and any optional details you choose to add. The website does not keep a copy of what you send through the form. It is sent to me by email.
• Basic technical data that the website's servers may record when you visit, such as your IP address and the pages requested.

• To reply to your enquiry and arrange a conversation.
• To discuss and agree any work you ask me to provide.
• To keep the website working and secure.

Under UK GDPR I rely on:

• Legitimate interests: responding to enquiries you send me, and keeping the website working and secure.
• Steps at your request before entering into a contract: when you ask me about providing work for you or your organisation.

I share personal information only with providers who host the website and handle email on my behalf, and only so far as they need it to provide those services.

Some of the companies that host this website or handle email for me may process information outside the UK. Where that happens, I rely on the safeguards that UK data protection law provides for, such as an adequacy decision or approved contract terms.

I keep your messages and details only for as long as I need them to reply to you, to carry out any work that follows from your enquiry, and to meet any legal, tax or professional obligations. I do not keep them longer than that.

Under UK GDPR you have the right to:

• Ask for a copy of the personal information I hold about you.
• Ask me to correct information that is wrong or incomplete.
• Ask me to delete your information.
• Ask me to restrict how I use your information.
• Object to how I use your information.
• Ask for your information in a format you can pass to someone else.

Some of these rights apply only in certain circumstances. To use any of them, contact me using the details below.

If you are unhappy with how I have handled your personal information, please tell me first so I can try to put it right. You also have the right to complain to the Information Commissioner's Office, the UK regulator for data protection, at ico.org.uk.

I will update this policy when the way I handle personal information changes. The date at the top of this page shows when it was last updated.

For any question about this policy or your personal information, email me at mloulaki@aol.com.