Privacy policy

Natalia Ryseva, private psychotherapy practice, Malta. I alone decide what this site collects and why.

When you book a session you give a name and an email address. That is enough to confirm the meeting and send you the video link.

The site asks no questions about your health, your state of mind or any diagnosis, and stores no such data. There are no intake questionnaires here.

I process booking details and messages to arrange and hold the session (GDPR Art. 6(1)(b)). Booking with a psychotherapist can itself say something about health. I process that as part of providing psychotherapy, under professional secrecy (GDPR Art. 9(2)(h)).

Plausible and the hosting server's logs run on my legitimate interest in knowing that the site works and how people find it (GDPR Art. 6(1)(f)). Google Analytics runs only with your consent (GDPR Art. 6(1)(a)).

Vercel Inc. (US) hosts the site. Its server sees every visitor's IP address and browser and keeps them briefly in technical logs.

Plausible Insights OÜ (Estonia, EU) counts visits without cookies and without personal data.

Google Ireland Limited receives Google Analytics data only if you pressed Accept.

If booking runs through the online calendar, Cal.com Inc. (US) processes your name and email. Stripe Payments Europe Ltd. (Ireland) processes the payment link.

WhatsApp and Telegram process your messages under their own terms, as independent companies.

US companies take part in the EU-US Data Privacy Framework or have signed the EU standard contractual clauses. I do not sell data or pass it on for advertising.

Nothing is paid at booking. After the meeting I send a link for card payment. A payment provider handles the transaction: you enter your card details on its side. I never see them and never store them.

I look at visitor numbers through Plausible. It runs without cookies and without personal data: it shows only aggregate figures for pages and referrers.

If you press Accept in the banner, the site loads Google Analytics 4. It sets _ga cookies and sends Google your IP address, browser details and the pages you view. Google Ireland Limited processes this data on my behalf. Data may reach the US: Google takes part in the EU-US Data Privacy Framework. Google keeps it for 2 months.

Google's advertising features are switched off. The booking confirmation page is never sent to Google. The site sets no advertising pixels.

Google Analytics never loads without your consent. You can change your choice at any time through the Cookie settings link at the bottom of every page. If you decline, the site deletes the Google Analytics cookies.

Booking data is kept for as long as it is needed to run and account for sessions. At your request I will delete it sooner.

Under GDPR you can ask for a copy of your data, correct it, delete it, restrict its use, receive it in a portable format and object to processing based on legitimate interest. You can withdraw consent at any time. Withdrawal does not undo processing that already took place.

I reply within 30 days. If my answer does not satisfy you, you can contact the Maltese supervisory authority (Information and Data Protection Commissioner, idpc.org.mt) or the data protection authority in your country.