Privacy policy
1. Data controller
Ruth Berenice Morales Sánchez (Ruth Morales), Tax ID 46440034K, address: C/ Benavent 10, 08028 Barcelona, Spain. Contact for data protection matters: psicologaruthmorales@gmail.com.
2. What data I process and why
| Situation | Data | Purpose | Legal basis |
|---|---|---|---|
| Contact form | First and last name, phone (optional), email, preferred language and message (optional) | To reply to your enquiry and assess whether I can help | Your consent (Art. 6.1.a GDPR) |
| Session booking | What you provide in the Acuity Scheduling booking service | To manage the appointment and send you the video call link | Pre-contractual measures or performance of the requested service (Art. 6.1.b GDPR) |
| Browsing the website | Technical data logged by the hosting provider on its servers (e.g. IP address and access date) | Security and operation of the site | Legitimate interest (Art. 6.1.f GDPR) |
Interactive tools. “Start here” and the mind-body map work only in your browser. Nothing you tick is saved or sent.
Health information. The form does not ask for any health data and I ask you not to include it in the message. If you do so anyway, I will treat it confidentially, only to reply to you, and delete it together with the rest of the enquiry. That will be addressed in the consultation, where you will be given the informed-consent and data-processing documents specific to the care relationship.
3. Recipients and processors
I do not disclose your data to third parties except where legally required. To provide the service, the following providers act as data processors:
- Web hosting: Netlify, Inc.
- Form handling: Netlify, Inc. (Netlify Forms).
- Booking service: Acuity Scheduling (Squarespace, Inc.).
- Video calls for sessions: Google Meet (Google).
- Email: Google (Gmail).
4. International transfers
Some of these providers may process data outside the European Economic Area, in particular in the United States. In that case they rely on appropriate safeguards such as the EU-US Data Privacy Framework or the European Commission’s standard contractual clauses. Netlify, Acuity Scheduling (Squarespace, Inc.) and Google have self-certified to the EU-U.S. Data Privacy Framework with the U.S. Department of Commerce, and also rely on the European Commission’s standard contractual clauses.
5. Retention
Form data is kept for as long as needed to handle your enquiry and, if no care relationship begins, deleted within 12 months. If you start therapy, clinical records will be kept for the periods set by the applicable healthcare regulations.
6. Your rights
You may exercise your rights of access, rectification, erasure, objection, restriction and portability, and withdraw your consent at any time, by writing to psicologaruthmorales@gmail.com and stating the right you wish to exercise. Withdrawing consent does not affect the lawfulness of prior processing.
If you believe your data has not been handled properly, you may lodge a complaint with the Spanish Data Protection Agency (www.aepd.es).
7. Security
I apply reasonable technical and organisational measures to protect your data. This website uses an encrypted connection (HTTPS).
8. Minors
This website is not aimed at children under 14. If you are under that age, you need the consent of your parent or legal guardian.
9. Changes to this policy
I may update this policy. Last updated: 19 September 2026.