Privacy Policy

1. DATA CONTROLLER

  • Identity: Dilyana Vladimirova Guy
  • NIF/NIE: Y8230228Z
  • Address: Almirante 15, Madrid, Spain
  • Email: info@phimind.co

The Data Controller certifies full compliance with the European General Data Protection Regulation (GDPR) and the Spanish Organic Law 3/2018 (LOPDGDD) regarding the protection of personal data.

2. PURPOSE AND CATEGORIES OF DATA COLLECTED
We only process personal data that you provide to us manually via our contact forms, emails, WhatsApp messages, or telephone communications.

  • Standard Data: Name, email address, telephone number, and payment information.
  • Special Category Data (Health Data): Due to the nature of hypnotherapy services, we collect sensitive data regarding your emotional wellness, personal history, and mental/physical health during intake forms and initial consultations.
  • Purpose: This data is processed exclusively to manage your booking requests, tailor your individual or group hypnotherapy sessions, process manual payments, and maintain our therapeutic and commercial relationship.

3. LEGAL BASIS FOR PROCESSING
The legal basis for processing your data is your explicit consent. By submitting an inquiry form, initiating communication, consenting to an intake evaluation or agreeing to a private or group session, you grant us permission to process your data for the specified purposes. You may revoke this consent at any time.

4. RECIPIENTS AND INTERNATIONAL DATA TRANSFERS
Your personal data will not be sold, rented, or shared with third parties for marketing purposes. Data will only be shared with reliable service providers essential to running our business operations (e.g., email infrastructure, video hosting platforms for online sessions like Zoom or Google Meet, and payment gateways like Stripe or PayPal).

Because we work with international clients and global tools, your data may be transferred and processed outside the European Economic Area (EEA). We ensure all such providers comply with adequate data protection frameworks and standard contractual clauses approved by the European Commission.

5. DATA RETENTION
In compliance with Spanish healthcare documentation guidelines and civil liability timelines, personal and health-related data collected during therapeutic processes will be securely archived for a minimum period of five (5) years from the date of your last session.

6. USER RIGHTS
You have the right to access, rectify, restrict, or erase your data, as well as the right to data portability. You can exercise these rights at any time by sending an email to info@phimind.co with a copy of your ID or passport for verification.