Privacy
This page is about personal data from the website. Confidentiality inside therapy is on How it works. Professional conduct is on the complaints page.
Last updated:
This page is about personal data. For professional conduct, see Complaints procedure.
Who is responsible
This website is run by Noa Chlebowski Ohana. For website and enquiry data, she is the controller. Write to contact@bodymindpsych.info. There is no separate data-protection officer.
Registration and professional details for the practice are on the Practical information page. This page is only about personal data.
What data is collected
If you use the contact form, the details you enter - your first name, the channel you asked me to reply on, the email address or phone number you gave, and anything you wrote in the message field - are sent to me by email. Please do not include clinical history, diagnoses or other health detail in that first message; a short sentence about why you are writing is enough.
Clinical notes from therapy are not stored on this website. They are kept separately under professional record-keeping rules.
Why it is collected
Website contact details are used only to reply to your enquiry. They are not sold, not used for marketing, and not added to any mailing list.
The site uses Vercel Web Analytics, a cookieless visitor count from the same host that serves these pages. It records the page path, the referring site if the browser sends one, approximate location (country, and sometimes region or city), and the type of device, browser and operating system. This is used to understand how the site is used, not to identify you as a person and not for advertising. To count unique visitors within a single day, a short-lived technical mark is derived from the request; it is not stored as a profile and is not used to follow you across websites or across days.
Legal basis
The legal basis for processing website enquiries is your consent (GDPR Art. 6(1)(a)). You can withdraw that consent at any time by writing to me.
How the contact form is processed
The website is hosted by Vercel, Inc. (United States and EU regions). Contact-form messages are delivered by Resend (United States). Both act as processors for that technical hosting and email delivery. Vercel also processes the cookieless site-use statistics described above.
WhatsApp (Meta) is offered only as a contact channel you choose; Meta’s terms then apply to that conversation. I do not use WhatsApp as a clinical-record system.
How long it is kept
If you do not become a client, I delete the enquiry once the correspondence has ended, and in any case within 12 months.
Processors and transfers
Some of these providers process data in the United States. Where the GDPR applies, that transfer relies on the provider’s standard contractual clauses or an equivalent safeguard. Ask if you want the current details.
Your rights
Depending on where you live, you may have rights under Israeli privacy law and/or the GDPR: to be told what information I hold, to receive a copy, to have inaccuracies corrected, to restrict or object to certain processing, to data portability, and - subject to the record-keeping duties that apply to psychologists - to ask for deletion. There is no automated decision-making, including profiling, on this website.
Cookies and stored preferences
This site sets no advertising cookies and runs no advertising or social-media tracking pixels. Two first-party preferences may be stored in your browser: the colour theme you chose (localStorage), and the language of the last locale path you visited (an httpOnly cookie, NEXT_LOCALE, used only to remember that choice). On the contact page, a first name and reply channel may be kept in sessionStorage for this visit only, so a page refresh does not wipe the short fields; the message field is never stored. None of this is used for advertising.
If you want to complain (GDPR)
This section is about personal data. It is not about professional conduct. For therapy or professional conduct, use the complaints procedure.
Write to me first at contact@bodymindpsych.info.
If you live in the EEA and you are not satisfied with my response, you can complain to the relevant supervisory authority. In the Netherlands that is the Autoriteit Persoonsgegevens (AP): https://www.autoriteitpersoonsgegevens.nl/en/submitting-a-tip-off-or-a-complaint-to-the-ap
If you live in another EEA country, you may complain to your local data-protection authority instead.