Privacy policy

Last updated: 7 November 2026

1. Who is the data controller

The controller of your personal data is Monika Zielińska, psychologist and CBT psychotherapist. For anything related to your data, email [email protected].

2. What data I collect and why

“Introductory call” form. Your full name, email address, phone number and preferred time for a call. I use them only to call you back and talk about a possible consultation. The legal basis is your consent (Art. 6(1)(a) GDPR) and steps taken at your request before entering into a contract (Art. 6(1)(b) GDPR).

Calendar booking. Your name, email address, the time you choose and any information you enter in the booking form. I use them to arrange and hold the online consultation or session (Art. 6(1)(b) GDPR).

Email. The data contained in messages you send me. I process it to reply (Art. 6(1)(f) GDPR — my legitimate interest).

Please don’t describe your health or difficulties in the forms — we’ll talk about them when we meet. What you share during sessions is covered by professional confidentiality and is not collected through this website.

3. Who I share data with

I use external providers who process data on my behalf:

• Formspree (Formspree, Inc., USA) — delivers contact form submissions to me,
• Cal.com (Cal.com, Inc., USA) — runs the booking calendar and video calls,
• Cloudflare (Cloudflare, Inc., USA) — website hosting,
• OVHcloud (OVH SAS, France) — email.

Some of these companies are based in the USA. Data is transferred outside the European Economic Area under mechanisms provided for in the GDPR, such as standard contractual clauses or the EU–US Data Privacy Framework.

4. How long I keep data

• Contact form data — until we have talked and decided about a consultation, no longer than 12 months, or until you withdraw consent.
• Booking and service data — for the duration of our work together, then for as long as the law requires (e.g. tax law).
• Email correspondence — for as long as needed to handle it.

5. Your rights

You have the right to:

• access your data and receive a copy,
• have your data corrected,
• have your data erased or its processing restricted,
• data portability,
• object to processing based on legitimate interest,
• withdraw your consent at any time, without affecting the lawfulness of processing before withdrawal,
• lodge a complaint with the Polish supervisory authority, the President of the Personal Data Protection Office (UODO, ul. Stawki 2, 00-193 Warsaw).

To exercise your rights, email [email protected].

Providing your data is voluntary, but without it I can’t contact you or arrange a meeting.

6. Cookies

This website doesn’t use its own cookies or analytics tools and doesn’t track visitors. The embedded Cal.com calendar and the hosting provider (Cloudflare) may set technical cookies needed for their services to work securely. You can manage cookies in your browser settings.

7. Changes to this policy

If this policy changes, I’ll update this page and the date at the top.