🔒 Data Protection Policy

Privacy Policy – HypnotherapyClinic.gr

Last updated: October 2025

1. Introduction

Protecting your personal data is of the utmost importance to us.

This Privacy Policy explains how we collect, use, store and protect the personal data you provide through HypnotherapyClinic.gr, by email, by telephone or in person.

The data controller is:

Sandy Messaropoulou
Integrative Psychotherapist & Cognitive Behavioural Clinical Hypnotherapist
📍 Peristeri, Attica, Greece
📧 info@hypnotherapyclinic.gr

2. What data we collect

Depending on how you contact us, we may collect:

Contact details: Full name, email address and telephone number.

Appointment information: Date, time, type of session and notes relating to your enquiry.

Communication data: The content of messages or enquiries you submit.

Automatically collected browsing data: IP address, device type, browser, cookies, time of visit and pages viewed.

Payment information: Only when you make a deposit payment through a secure payment link or by bank transfer. We do not store card details.

We do not collect sensitive health-related personal data through the website.

Such information is only obtained during the therapeutic process, under strict confidentiality and in accordance with professional ethical standards.

3. How we collect data

We collect personal data when:

you complete a contact or booking form,
you contact us by telephone or email,
you use our website, including through cookies, Google Analytics and Wix Analytics.

4. Purposes of processing

We use your personal data solely for the following purposes:

responding to your enquiries or appointment requests,
confirming or changing appointments,
sending information about our services, only where you have given explicit consent,
improving the website and user experience,
complying with tax, accounting and legal obligations.

5. Legal basis for processing

The processing of your personal data may be based on:

your consent, under Article 6(1)(a) of the GDPR,
the performance of a contract or steps taken before entering into a contract, under Article 6(1)(b),
compliance with a legal obligation, under Article 6(1)(c),
our legitimate interest in ensuring the secure and effective operation of the website.

6. Data retention

Your personal data may be retained as follows:

Enquiries and appointment-related data: For as long as necessary to manage your enquiry, provide services and maintain appropriate records.

Telephone or website enquiries: Contact details may be retained for as long as they remain relevant to the provision of services and ongoing communication, unless you request their deletion.

Tax and accounting records: For the period required by applicable law, generally between five and ten years.

You may request the correction or deletion of your personal data at any time, subject to any legal obligations requiring us to retain certain information.

7. Sharing of personal data

Your personal data is not shared with third parties unless:

disclosure is required by law or by a competent authority,
it is necessary for the technical operation of the website, for example through Wix.com Ltd,
you have explicitly consented to the use of an external provider, such as an online payment service or email marketing platform.

Any service providers we use are required to comply with confidentiality and applicable data protection obligations.

8. Cookies and analytics tools

The website uses cookies and analytics tools, including Wix Analytics and Google Analytics, for statistical and functional purposes.

You can manage your cookie preferences through the cookie banner.

For more information, please refer to our Cookie Policy.

9. Your rights

Under the GDPR, you have the right to:

request access to your personal data,
request correction or deletion of your data,
restrict or object to the processing of your data,
withdraw your consent at any time,
request the transfer of your data, where applicable,
lodge a complaint with the Hellenic Data Protection Authority.

To exercise your rights, please contact:

📧 info@hypnotherapyclinic.gr

10. Security

We use SSL encryption and secure Wix servers to help protect your personal data.

Access to personal data is restricted and the information is used only for the purposes described in this policy.

11. Newsletters and marketing emails

Newsletters, articles and promotional emails are sent only to individuals who have provided explicit consent through a subscription form or other opt-in process.

You may unsubscribe at any time by using the unsubscribe option included in the email or by contacting:

📧 info@hypnotherapyclinic.gr