Privacy policy

This is an English translation provided for convenience. In case of any discrepancy, the Spanish version prevails.

Your privacy and the confidentiality of what you share are an essential part of my work. This policy explains how I process your personal data under Regulation (EU) 2016/679 (GDPR) and Spanish Organic Law 3/2018 on Personal Data Protection and Digital Rights (LOPDGDD). Everything you share in therapy is also protected by professional secrecy.

1. Data controller

2. What data I process and why

Enquiries and appointment requests

When you contact me by WhatsApp, email, phone or through the contact form, I process the data you provide (name, phone, email and the content of your message) to reply to you and, where appropriate, arrange an appointment.

The form on this website does not store any data: sending it opens WhatsApp with your message already written, and you decide whether to send it.

• Legal basis: your consent (Art. 6.1.a GDPR) and steps taken at your request before entering into a contract (Art. 6.1.b GDPR).
• Retention: as long as needed to handle your enquiry and, at most, one year if no therapy begins.

Providing psychological care

If you begin therapy, I will process your identification and contact details and the health data needed to provide care (clinical record).

• Legal basis: the contractual relationship (Art. 6.1.b GDPR) and the provision of health care by a professional bound by professional secrecy (Art. 9.2.h GDPR).
• Retention: clinical records are kept for at least five years from discharge for each episode of care, in accordance with Spanish Law 41/2002 on patient autonomy and applicable health regulations.

Invoicing

I process the data needed to issue invoices and meet my accounting and tax obligations.

• Legal basis: compliance with legal obligations (Art. 6.1.c GDPR).
• Retention: for the periods required by tax and commercial law (generally four to six years).

3. Minors

Consent from parents or legal guardians is required to provide care to children under 14 (Art. 7 LOPDGDD). Psychological care for minors also follows the applicable health regulations and the Spanish Code of Ethics for Psychologists.

4. Recipients

I do not share your data with third parties unless legally required (for example, with the tax authorities or the courts). To provide the service I rely on providers acting as data processors, with the safeguards required by the GDPR:

• WhatsApp (WhatsApp Ireland Ltd., Meta group), if you choose to contact me this way. This may involve international transfers to the United States, covered by the EU-US Data Privacy Framework and standard contractual clauses.
• The email, video-call and web-hosting providers I use at any given time.

5. Your rights

You can exercise your rights of access, rectification, erasure, objection, restriction of processing and portability at any time, and withdraw any consent given, by writing to or by post to the address above, enclosing a copy of an identity document.

If you believe your data has not been processed correctly, you can lodge a complaint with the Spanish Data Protection Agency (www.aepd.es).

6. Security and confidentiality

I apply appropriate technical and organisational measures to protect your data, especially health data, and handle it in strict confidence and under professional secrecy.

7. Cookies and third-party resources

This website does not use its own cookies or any analytics or advertising tools.

To display fonts and styles, your browser downloads resources from Google Fonts (Google Ireland Ltd.) and cdn.tailwindcss.com. These providers receive your IP address as a technical part of the connection.

Links to Google Maps, WhatsApp or YouTube take you to external services, which apply their own privacy and cookie policies.

8. Changes to this policy

I may update this policy to reflect changes in the law or in the service. The date of the latest update appears at the top of this page.