Privacy and confidentiality

This website and the private psychological practice it describes are run by Noa Chlebowski Ohana, a specialist medical psychologist registered with the Israel Ministry of Health (reg. no. 27-135882) and a Psycholoog NIP (membership no. 248744). For website and enquiry data, she is the controller. Write to contact@bodymindpsych.info.

NIP membership is a professional association. It is not a Dutch statutory healthcare registration (BIG register). Sessions are not reimbursed under Dutch basic health insurance (basisverzekering).

This page explains how information is handled in two separate places: on this website, and within therapy itself. They are governed by different rules, so they are described separately.

If you use the contact form, the details you enter - your first name, the channel you asked me to reply on, the email address or phone number you gave, and anything you wrote in the message field - are sent to me by email so that I can reply. The legal basis is your consent (GDPR Art. 6(1)(a)). Please do not include clinical history, diagnoses or other health detail in that first message; a short sentence about why you are writing is enough.

These details are used only to respond to you. They are not sold, not used for marketing, and not added to any mailing list. If you do not become a client, I delete the enquiry once the correspondence has ended, and in any case within 12 months.

This site sets no advertising cookies and runs no advertising or social-media tracking pixels. Two first-party preferences may be stored in your browser: the colour theme you chose (localStorage), and the language of the last locale path you visited (an httpOnly cookie, NEXT_LOCALE, used only to remember that choice). On the contact page, a first name and reply channel may be kept in sessionStorage for this visit only, so a page refresh does not wipe the short fields; the message field is never stored. None of this is used for advertising.

The website is hosted by Vercel, Inc. (United States and EU regions). Contact-form messages are delivered by Resend (United States). Both act as processors for that technical hosting and email delivery. Clinical notes are not stored on this website.

If we start therapy, sessions take place by video on a platform we agree together. WhatsApp (Meta) is offered only as a contact channel you choose; Meta’s terms then apply to that conversation. I do not use WhatsApp as a clinical-record system.

Some of these providers process data in the United States. Where the GDPR applies, that transfer relies on the provider’s standard contractual clauses or an equivalent safeguard. Ask if you want the current details.

Everything you say in a session is confidential. Nothing about your treatment is shared with your employer, your colleagues, your family, your doctor, your health fund or your insurer without your written consent.

There are narrow legal exceptions. In Israel they include a real and immediate danger to your life or to someone else's, a concern about harm to a minor or a helpless person, or a court order. Dutch professional rules have a similar duty to act when there is a serious risk of harm. If such a situation ever arises, I will discuss it with you wherever it is possible to do so.

Online work across borders has extra limits: emergency services, duty-to-warn rules and record-keeping duties follow the country whose professional rules apply to the work, and local crisis services are the right first contact in a crisis. We check this before starting.

Sessions are not recorded. Clinical notes are kept securely and only for as long as professional standards require.

Depending on where you live, you may have rights under Israeli privacy law and/or the GDPR: to be told what information I hold, to receive a copy, to have inaccuracies corrected, to restrict or object to certain processing, to data portability, and - subject to the record-keeping duties that apply to psychologists - to ask for deletion. You can withdraw consent for website contact at any time by writing to me. There is no automated decision-making, including profiling, on this website.

If you live in the EEA and are not satisfied with my response, you can complain to your national data-protection authority. In the Netherlands that is the Autoriteit Persoonsgegevens (autoriteitpersoonsgegevens.nl).

If you are unhappy with the therapy or with how I have handled your information, please write to me first so I can try to put it right. You may also use the complaints route of the relevant professional body: in Israel, the Ministry of Health and the psychologists’ professional ethics procedures; in the Netherlands, the NIP complaints procedure for members.