Introduction
We have created this privacy statement to demonstrate our current and continuing commitment to the privacy of personal information provided by those visiting and interacting with this website and the content provided on the site. We hold the privacy of your personal information in the highest regard. The following discloses our information gathering and dissemination practices for this website. Please read this Privacy Policy carefully before using this website.
1. Privacy Policy consent
The website and its content is owned by EVA Therapy (“Company”, “we”, or “us”). The term “you” refers to the user or viewer of evatherapy.com (“Website”). This Privacy Policy describes how we collect, use, process and distribute your information, including Personal Data (as defined below) used to access this Website. We will not use or share your information with anyone except as described in this Privacy Policy. The use of information collected through our Website shall be limited to the purposes under this Privacy Policy and our Terms and Conditions. We reserve the right to change this Privacy Policy on the Website at any time. In the event of a material change, we will let you know via email and/or a prominent notice on our Website. Use of any personal information or contribution that you provide to us, or which is collected by us on or through our Website or its content, is governed by this Privacy Policy.
2. What data do we collect about you and for what purpose?
When you visit our website, we collect personal information and website information from you so that we can provide you with a positive experience when using our Website and any content provided. We only collect the minimum amount of information necessary to fulfil our obligations to you. We may collect:
Personal information you choose to provide
- Registration information — when you register for any of our products, services or newsletters you provide us with information about yourself: name, email address, phone number and country.
- Booking information — the date and time of your sessions and your answers to the booking questions. For RTT, the intake form also includes information about your health and wellbeing, which you provide voluntarily so that we can prepare your therapy.
- Payment information — payments are processed by our payment provider (Stripe). We do not see or store your card details.
- Email information — messages you send us.
Please note that the information above (“Personal Data”) is given to us voluntarily, and by providing it you consent to us using, collecting and processing this Personal Data. You are welcome to opt out or ask us to delete your Personal Data at any time by contacting us at ellie@evatherapy.com, by using the unsubscribe link in our emails, or by deleting your account from your account page.
Our lawful grounds for this processing are the performance of a contract between you and us (or taking steps at your request to enter into one), your consent, and our legitimate interests in replying to communications sent to us, keeping records and establishing, pursuing or defending legal claims. If you choose not to provide certain Personal Data, you may not be able to use certain parts of our Website or services.
Website use information
Anonymous data collection and use. To maintain our Website's quality, we may use your IP address to help diagnose problems with our server and to administer the Website. Your IP address is the number assigned to computers connected to the Internet. This “traffic data” cannot personally identify you. Our lawful ground for this processing is our legitimate interest in properly administering our website and business.
Cookies. Our Website uses only the cookies that are strictly necessary for it to work: keeping you signed in, remembering your language and, during payment, our payment provider's fraud-prevention cookies. We do not use advertising or tracking cookies.
3. How do we use the information you provide to us?
We use personal information to provide the products and services you requested, to process your payment, to prevent fraudulent transactions and to improve our content and services, such as:
- Contacting you — about your bookings and purchases (to fulfil our contract with you), and with news and offers only if you have given your clear consent. You can always opt out of our emails.
- Processing payments — through a third-party payment processor that takes the utmost care in securing data and complies with the GDPR.
- Sharing with third parties — only with service providers who provide IT, hosting, email and payment services, with professional advisers (lawyers, accountants, insurers), and with authorities where the law requires it. We require all third parties to respect the security of your personal data, to treat it in accordance with the law and to process it only for specified purposes and on our instructions.
We will only use your personal data for the purposes for which we collected it, unless we reasonably consider that we need to use it for another reason that is compatible with the original purpose. If we need to use your personal data for an unrelated purpose, we will notify you and explain the legal basis that allows us to do so.
4. Third-party links
This website may include links to third-party websites, plug-ins and applications. Clicking on those links or enabling those connections may allow third parties to collect or share data about you. We do not control these third-party websites and are not responsible for their privacy statements. When you leave our website, we encourage you to read the privacy notice of every website you visit.
5. Sharing and selling information
We do not share, sell, lend or lease any of the information that uniquely identifies you (such as email addresses or personal details) with anyone, except to the extent necessary to process transactions or provide services that you have requested.
Legally compelled disclosure
We may disclose information when legally compelled to do so — when we, in good faith, believe that the law requires it or for the protection of our legal rights — or when disclosure is necessary to protect the safety of our users and the public.
6. International transfers
Some of our service providers are based outside the European Economic Area (EEA). Whenever we transfer your personal data out of the EEA, we ensure a similar degree of protection by making sure at least one of these safeguards is in place: the country has been approved by the European Commission as providing an adequate level of protection, or we use contracts approved by the European Commission (Standard Contractual Clauses) that give personal data the same protection it has in Europe.
7. How can you access and correct your information?
Under data protection laws you have rights in relation to your personal data, including the right to request access, correction, erasure, restriction or transfer, to object to processing, to data portability and, where processing is based on consent, to withdraw consent. To exercise any of these rights, please email us at ellie@evatherapy.com. You can also update your details or delete your account yourself from your account page.
You will not have to pay a fee to access your personal data (or to exercise any of the other rights). We may need to ask you for specific information to confirm your identity before we act on your request. We try to respond to all legitimate requests within one month.
If you are not happy with how we collect and use your data, you have the right to complain to the data protection supervisory authority — in Bulgaria, the Commission for Personal Data Protection (www.cpdp.bg). We would be grateful if you contacted us first so that we can try to resolve it for you.
8. Data security
We have put in place security measures to prevent your personal data from being accidentally lost, used, altered, disclosed or accessed without authorisation. Access to your personal data is limited to those who have a business need to know it, who process it only on our instructions and are bound by confidentiality. We have procedures to deal with any suspected personal data breach and will notify you and the regulator where we are legally required to.
9. Data retention
We keep your personal data only for as long as necessary to fulfil the purposes we collected it for, including legal, accounting and reporting requirements. For tax purposes the law requires us to keep basic information about our customers (contact, identity, financial and transaction data) for a number of years after they stop being customers.
10. Policy changes
We may change this Privacy Policy from time to time and will post any changes here. If the Privacy Policy changes, we will not use the personal information you have submitted to us in a manner materially inconsistent with the policy under which it was collected without your prior consent.