Connected Therapy

Legal

Privacy Policy

At Connected Therapy, your privacy is more than a legal requirement; it is a fundamental part of the safety and trust required for healing. This policy explains how Polina Stoycheva, PhD, handles your personal information.

1. Data Controller

The responsible party for your data is:

Polina Stoycheva, PhDConnected Therapypolina.stoycheva@helsinki.fi

2. Information Collected

We collect only the information necessary to provide you with high-quality therapeutic care:

  • Identity & contact data. Name, email address, and phone number provided via the contact form or intro call.
  • Clinical data. Brief notes regarding our sessions, which are essential for tracking your progress and providing effective EFIT therapy.
  • Financial data. Payment history and transaction details. Please note that credit card details are processed securely by Stripe and are never stored on our servers.

3. Purpose of Processing

Your data is used to:

  • Schedule and conduct therapy sessions.
  • Communicate regarding appointments and inquiries.
  • Process payments for services rendered.
  • Ensure clinical excellence through professional supervision (where data is shared anonymously).

4. Legal Basis for Processing

Under GDPR, we process your data based on:

  • Contract: To fulfill our agreement to provide therapy services.
  • Consent: For initial inquiries and communication.
  • Legal obligation: To comply with health record-keeping regulations in Finland.

5. Data Sharing and Confidentiality

Your personal information is strictly confidential. It will never be sold or shared for marketing purposes. It is only shared in the following limited circumstances:

  • Clinical supervision. As a therapist in training for EFIT specialization, Polina discusses cases with a senior supervisor. In these instances, your identity is kept anonymous.
  • Service providers. We use trusted partners like Stripe for payments and Railway for website functionality. These providers are GDPR-compliant.
  • Legal requirements. If there is a legal obligation to disclose information (e.g., a threat of harm to yourself or others).

6. Data Retention

Clinical records are kept in accordance with Finnish law and professional ethical guidelines. Contact information is kept only as long as necessary to maintain our professional relationship.

7. Your Rights

Under the GDPR, you have the right to:

  • Request access to the personal data we hold about you.
  • Request the correction of inaccurate information.
  • Request the deletion of your data (subject to clinical and legal record-keeping requirements).
  • Withdraw your consent for communication at any time.

8. Security

We implement technical and organizational security measures to protect your data from unauthorized access or disclosure. Our website and payment portal use SSL encryption to ensure your connection is secure.

9. Contact

If you have any questions regarding your privacy or wish to exercise your rights, please contact Polina Stoycheva directly at polina.stoycheva@helsinki.fi.