Privacy Policy

Who is responsible

The controller for the data processed through this website is Alona Grytsko, reachable at alona@alonagrytsko.com. Full contact details are listed in the legal notice.

The short version

This website does not use analytics, advertising or tracking of any kind. There are no third-party cookies and no visitor profiling. Data reaches me only when you choose to send it: through the contact form, through the reflection tool, or by booking an appointment.

Contact form

When you use the contact form, I receive the name, email address and message you enter. This is used solely to answer your enquiry.

The legal basis is Article 6(1)(b) GDPR where your message concerns a possible therapy arrangement, and otherwise your consent under Article 6(1)(a) GDPR, which you give by ticking the box before sending.

The reflection tool — please read this part

The reflection tool asks about how you have been feeling, how long it has lasted, and what you would like support with. Together with your email address, these answers say something about your mental health. Under Article 9 GDPR this counts as a special category of personal data, which receives stronger protection than ordinary contact details.

Because of that, the tool only processes your answers if you explicitly consent before submitting them. The legal basis is Article 9(2)(a) GDPR — your explicit consent — and there is no other purpose: your answers are used to generate the reflection shown on screen and to let me prepare should you decide to get in touch.

Your answers are not used for advertising, are never passed to third parties, and are not processed by any external service. The reflection you read is composed on this website's own server; no artificial intelligence service is involved and nothing is sent outside the hosting infrastructure described below.

You may withdraw your consent at any time by writing to alona@alonagrytsko.com. Withdrawal does not affect the lawfulness of processing before it.

Booking appointments

Appointments are booked through an external scheduling service. When you follow a booking link you leave this website, and the data you enter there — typically your name, email address and chosen time — is processed by that provider under its own privacy policy. I receive the booking details in order to hold the appointment. The legal basis is Article 6(1)(b) GDPR.

Hosting and server logs

This website is hosted by Hostinger. Like any web server, it records technical access data — IP address, time of request, requested page, browser and operating system. These logs exist to keep the site running and secure, are not combined with any other data, and are not used to identify you.

The legal basis is Article 6(1)(f) GDPR, my legitimate interest in operating a functioning and secure website.

Email

Messages from the contact form and the reflection tool are delivered to my mailbox over an encrypted connection through the mail servers of the same hosting provider. Please note that ordinary email is not end-to-end encrypted; if you would prefer a different channel for something sensitive, say so and we will arrange one.

Cookies and local storage

This website sets exactly one cookie, storing your chosen language so the site opens in that language next time. It contains no identifier and is not used to recognise you.

In addition, your own browser stores the settings of the accessibility widget — text size, contrast and reduced motion — locally on your device. That information never reaches the server.

Both are technically necessary or set at your own request, so no cookie banner is required and no consent is sought for them.

How long data is kept

• Enquiries and reflection results: kept as long as needed to respond and, if therapy follows, for the duration of our professional relationship plus any statutory retention period.
• Server logs: deleted or anonymised by the hosting provider after a short period.
• Language cookie: expires after twelve months, or whenever you clear your browser data.

If you ask me to delete your data and no retention duty prevents it, I will do so.

Your rights

Under the GDPR you have the right to:

• ask what data about you is being processed, and receive a copy;
• have inaccurate data corrected;
• have your data erased;
• have processing restricted;
• receive your data in a portable format;
• object to processing based on legitimate interests;
• withdraw any consent you have given, at any time.

To exercise any of these, write to alona@alonagrytsko.com. You will not be charged, and you do not need to give a reason.

Complaints

If you believe your data has been handled unlawfully, you have the right to lodge a complaint with the data protection supervisory authority of the EU member state where you live, work, or where the alleged infringement took place.

Changes

If the way this website processes data changes — for example if a new service is added — this page is updated and the date at the top changes with it.