Privacy Policy

Effective Date: 12 August 2026

Data Controller:

Alex Hintertan

Operating as: Neuroqueer Psychologist

Website: https://neuroqueerpsychologist.com

Contact Email: nonbinaryaudhdpsychologist@gmail.com

Address / Location: Warsaw, Poland

1. Introduction

This Privacy Policy outlines how Neuroqueer Psychologist (“I”, “my”, “me”) collects, uses, stores, and protects your personal data when you visit my website, contact me, or engage in psychological or therapeutic services.

I am committed to protecting your privacy in full compliance with the General Data Protection Regulation (GDPR – Regulation (EU) 2016/679) and applicable local data protection laws.

2. What Data I Collect and Why

Depending on how you interact with my website and practice, I may collect the following types of information:

A. General Personal Data

  • Identity & Contact Data: Your name, email address, phone number, and communication language.
  • Technical Data: IP address, browser type, device information, and site usage data collected via essential cookies or analytics.

B. Special Category Data (Health / Therapy Data)

As a psychological practice, providing services requires processing special category data under Article 9 of the GDPR (specifically, data concerning health). This includes:

  • Intake forms, session notes, mental health history, diagnoses, and details shared during sessions or in secure contact forms.

3. Legal Basis for Processing (GDPR Articles 6 & 9)

I process your data under the following legal bases:

  1. Performance of a Contract (Art. 6(1)(b) GDPR): To schedule appointments, communicate regarding sessions, and deliver psychological services.
  1. Explicit Consent (Art. 6(1)(a) & Art. 9(2)(a) GDPR): For processing special category data (health data) gathered during consultation or therapy. You may withdraw consent at any time.
  1. Legal Obligation (Art. 6(1)(c) GDPR): To fulfill legal obligations, such as invoicing, tax retention, or professional record-keeping duties.
  1. Legitimate Interest (Art. 6(1)(f) GDPR): To ensure website security, prevent fraud, and maintain proper practice management.

4. Professional Confidentiality & Data Sharing

Your clinical data and session contents are strictly confidential and protected by professional ethics and data privacy regulations.

I do not sell or rent your personal data. I only share data under the following limited circumstances:

  • Service Providers (Data Processors): Trusted third-party tools essential to operating the practice (e.g., encrypted practice management software, secure videoconferencing platforms, tax/accounting software). All providers are contractually bound to GDPR compliance.
  • Legal Exceptions / Safeguarding: In rare circumstances where disclosure is mandated by law or necessary to prevent imminent harm to yourself or others.

5. International Data Transfers

If any third-party tools or servers process data outside the European Economic Area (EEA), I ensure appropriate safeguards are in place, such as Standard Contractual Clauses (SCCs) or adequacy decisions (e.g., EU-U.S. Data Privacy Framework).

6. How Long I Keep Your Data

  • Clinical / Health Records: Kept for the duration required by applicable health record retention laws or professional regulations (typically 5–10 years following termination of service).
  • Billing / Tax Records: Retained for the statutory period required by tax regulations (usually 5–7 years).
  • Inquiries / Contact Data: Retained as long as necessary to answer your inquiry or for up to 6 months if no service contract is concluded.

7. Your GDPR Rights

Under the GDPR, you have the following rights regarding your personal data:

  • Right to Access: Request a copy of the personal data held about you.
  • Right to Rectification: Request correction of inaccurate or incomplete data.
  • Right to Erasure (“Right to be Forgotten”): Request deletion of data, subject to legal record-keeping exemptions.
  • Right to Restrict Processing: Request limited handling of your data in specific scenarios.
  • Right to Data Portability: Request transfer of your data in a structured, readable format.
  • Right to Withdraw Consent: Revoke consent for processing health data at any time without affecting prior lawful processing.
  • Right to Lodge a Complaint: You have the right to file a complaint with your local Data Protection Authority (e.g., UODO in Poland or equivalent in your EU country).

To exercise any of these rights, please contact: nonbinaryaudhdpsychologist@gmail.com

8. Cookies and Tracking

This website uses cookies to ensure basic functionality. If analytics or third-party cookies are integrated, you will be prompted to grant consent via the cookie banner on your first visit. You can manage or disable cookies at any time via your browser settings.

9. Changes to This Policy

I may update this Privacy Policy periodically to reflect changes in legal requirements or operational practices. Updates will be posted on this page with a revised “Effective Date”.