1. Data Controller Information
Under Regulation (EU) 2016/679 (General Data Protection Regulation – GDPR) and applicable national privacy laws (including the French Data Protection Act – Loi Informatique et Libertés), the entity responsible for the processing of your personal data is:
Tetiana Shkliaruk
Certified Psychologist & Gestalt Therapist
Practice Location: Paris, France (In-Person & Online Consultations Globally)
Direct Contact / WhatsApp: +380 67 447 33 27
Website: https://tetianashkliaruk.com
2. Scope of Services & Therapeutic Framework
This Privacy Policy applies to all interactions with Tetiana Shkliaruk, including visits to this website (tetianashkliaruk.com), booking individual therapy sessions, couples counseling, crisis psychological support, coaching, and related direct communications via WhatsApp, Zoom, email, or telephone.
Because psychological support involves sharing intimate personal thoughts and health-related reflections, we hold data protection to the highest medical, psychological, and ethical standards.
3. Categories of Personal Data Collected
We process only the personal data that is strictly necessary to deliver high-quality psychological counseling and maintain effective communication:
A. Identification & Contact Data
- Full name or preferred name / alias.
- Contact details: email address, telephone / WhatsApp number.
- Preferred language of consultation (English, Ukrainian, Russian, French).
- Time zone and preferred scheduling preferences.
B. Special Category Health & Therapeutic Data (GDPR Article 9)
During consultations, you may voluntarily disclose sensitive personal information concerning your emotional state, psychological history, family dynamics, relationships, and well-being.
- Therapeutic session notes and clinical reflections maintained exclusively by Tetiana Shkliaruk.
- Goals and topics discussed in therapy (e.g. anxiety management, relationship dynamics, crisis adaptation, burnout recovery).
- Emergency contact details if provided for crisis intervention situations.
C. Technical, Device & Website Usage Data
- Standard server logs (IP address, browser type, operating system, date and time of visit).
- Language preferences saved through the Google Translate module (e.g., cookie
googtrans).
4. Legal Bases for Processing Under GDPR
We process your data only where a valid legal foundation exists under GDPR Article 6 and Article 9:
- Explicit Consent (Art. 6(1)(a) & Art. 9(2)(a)): For the collection and processing of special category psychological and therapeutic data voluntarily shared during consultations. You have the right to withdraw your consent at any time.
- Contract Performance (Art. 6(1)(b)): To fulfill appointment scheduling, manage consultations, process invoices, and provide psychological services agreed upon between you and Tetiana Shkliaruk.
- Compliance with Legal Obligations (Art. 6(1)(c)): To comply with mandatory statutory accounting, tax, and professional record-keeping regulations.
- Vital Interests (Art. 6(1)(d) & Art. 9(2)(c)): In exceptional life-threatening emergency situations where disclosure is necessary to protect your vital life or that of another individual.
5. Strict Confidentiality & Professional Secrecy
Tetiana Shkliaruk adheres strictly to the Code of Ethics for Psychologists and international standards of Gestalt therapy practice (including European Association for Gestalt Therapy – EAGT principles).
Absolute Confidentiality Principle:
Everything shared within individual or couples consultations remains strictly private and confidential. Session recordings (audio or video) are never made without prior explicit written agreement. Your identity and personal experiences are never sold, rented, or disclosed to commercial third parties.
Statutory Exceptions to Confidentiality: Under professional psychological codes and applicable law, confidentiality may only be breached in narrow, legally prescribed circumstances:
- Where there is an imminent, severe danger of harm to your life or the life of others.
- Where there is a legal obligation to report child abuse or grave danger to vulnerable individuals.
- In the event of a binding court order or statutory requirement.
6. Data Security, Storage & Retention Periods
A. Technical & Organizational Safeguards
Appropriate technical safeguards are implemented to protect your data against unauthorized access, loss, or alteration:
- SSL/TLS Encryption: All traffic on tetianashkliaruk.com is encrypted via HTTPS.
- Encrypted Storage: Client notes and records are stored in encrypted, password-protected environments with multi-factor authentication.
- Isolated Data: Clinical session notes are segregated from administrative billing information and anonymized wherever feasible.
B. Retention Schedules
- Therapeutic Records: Retained for a standard period of 5 years following the conclusion of therapy to ensure continuity of care if a client returns, after which they are securely deleted unless a longer retention is mandated by law.
- Financial & Invoicing Records: Retained for up to 10 years in compliance with statutory French and European tax and commercial accounting laws.
- Website Inquiries: Contact messages and correspondence that do not result in ongoing therapy are deleted after 12 months.
7. Personality & Relationship Patterns Assessment & Lead Data
Visitors who choose to undertake the online Personality & Relationship Patterns Test are required to register their basic details before starting the self-assessment. We apply strict privacy-by-design and data-minimization principles:
A. Information Collected Upon Registration
- First Name: Used solely to lightly personalize your questionnaire and results experience.
- Email Address: Used to create your assessment lead record, verify access, and deliver your results copy if explicitly requested.
- Selected Language: To ensure communications and results correspond with your language preference (EN, FR, UK, RU, ES, IT).
- Consent Information: Mandatory test consent, consent timestamp, privacy policy version, and separate optional marketing consent timestamp.
- Test Progress Status: Timestamps when the assessment was started and completed.
B. Purpose & Legal Basis (Art. 6(1)(a) GDPR)
- Provision of the Self-Assessment: Processing your name and email to initialize your assessment session and generate your personalized results dashboard upon completion.
- Transactional Results Dispatch: Delivering a summary copy of your results only when you deliberately click "Send My Results by Email".
- Independent Marketing Communications (Separate Consent): We only send psychology insights, articles, and consultation information if you voluntarily checked the separate, optional marketing consent checkbox. Marketing consent is never assumed or bundled with assessment completion.
C. Strict Separation of Psychological Scores & Answers
Privacy-by-Design Score Calculation:
Individual questionnaire answers (Q1 through Q50) and calculated psychological dimension scores are processed entirely client-side and retained only in your browser's local/session storage by default. They are never permanently stored in our lead database, never associated with your email for commercial profiling, and never shared with advertising tracking pixels (such as Google Ads, Meta Pixel, or TikTok).
D. Retention, Access, Rectification, Deletion & Consent Withdrawal
Assessment lead records are retained for administrative verification and analytics reporting. You can exercise your GDPR Right to Access, Rectification, Erasure, or Withdrawal of Consent at any time by contacting us.
8. Third-Party Service Providers & Telehealth Tools
To provide online consultations and website accessibility, we partner only with trusted, industry-standard service providers who comply with GDPR requirements:
- Teleconferencing & Communication: Zoom Video Communications, WhatsApp (Meta), and Skype. Online sessions utilize secure, encrypted video channels.
- Web Hosting & Server Infrastructure: Secure European-based server infrastructure with automated backups and firewall protection.
- Multilingual Translation: Google Translate API widget for real-time translation across 6 languages.
9. Your Rights Under GDPR
As a data subject located in the European Economic Area or globally, you enjoy comprehensive rights under GDPR:
visibility Right of Access (Art. 15)
Request a copy of the personal data held about you.
edit Right to Rectification (Art. 16)
Correct inaccurate, outdated, or incomplete information.
delete_forever Right to Erasure (Art. 17)
Request deletion of your data where retention is no longer legally required.
pause_circle Right to Restriction (Art. 18)
Limit how your personal data is processed under specific circumstances.
swap_horiz Data Portability (Art. 20)
Receive your data in a structured, machine-readable format.
cancel Right to Withdraw Consent (Art. 7)
Revoke your consent for future data processing at any time without penalty.
To exercise any of these rights, simply contact us via WhatsApp at +380 67 447 33 27 or through the website contact form. We respond to all verified requests within 30 days.
You also have the right to lodge a complaint with the relevant supervisory authority, such as the Commission Nationale de l'Informatique et des Libertés (CNIL) in France (www.cnil.fr) or your local European data protection authority.
11. Contact Information & Policy Updates
If you have any questions, requests, or concerns regarding this Privacy Policy or how your personal information is protected, please get in touch directly:
Tetiana Shkliaruk
Psychologist & Gestalt Therapist
Available via WhatsApp & In-Person (Paris, France)
This policy was last revised on January 1, 2026. We may update this policy periodically to reflect evolving legal, technological, or ethical requirements.