Privacy
Version 2 · effective 3 August 2026 · applies to the pilot site
The short version
This site runs no analytics, loads nothing from third parties (fonts included — they
are served from this domain), and sets one strictly functional cookie
(ft, a signed timestamp that protects the forms against bots; it
identifies nobody and expires after 24 hours). We store only what you type into a
form, use it only for the stated purpose, and delete it on schedule.
Who is responsible
During the pilot, the data controller is the responsible operator of this initiative, operating from Bosnia and Herzegovina and reachable personally at mihailo@saudadetherapy.com. The registered nonprofit entity replaces this entry the day its registration completes. For anything about your data, write there or to contact@saudadetherapy.com — requests are answered by the controller personally.
What we process, why, and for how long
- Opening notification list — your email and, if you choose to share them, your country and preferred therapy language. Purpose: one notification when reviewed therapists are available. Legal basis: your consent, given by submitting the form; withdraw it any time by writing to us and we delete the record. Retention: until the notification is sent or you withdraw, whichever comes first. Providing the optional fields is voluntary; omitting them only means the notification cannot be matched to your region.
- Therapist verification information — the professional details needed to locate and check an applicant's credentials: professional title, qualification name, institution, registration body and number, professional memberships, insurer, coverage territory and relevant public-source links, plus practice details, language/approach/service selections and your experience note. We do not request or store copies of diplomas, licences, identity documents, insurance certificates or other credential documents. Purpose: reviewing your application and verifying submitted details. Legal bases: steps taken at your request prior to a possible listing agreement (application and checks); our legitimate interest in an accurate directory (contacting registers, regulators, institutions or insurers to confirm what you submitted, and keeping a verification audit of the source contacted, the date and the outcome); your consent (publishing your approved profile). Retention: applications that do not proceed are deleted within six months; if listed, application and verification-outcome data are kept for the duration of the listing. We retain the verification outcome, the authoritative source and the date checked — not incidental correspondence — and we delete personal information we did not need to receive.
- Contact messages — name, email, message. Purpose: answering you, including confidential concerns about a listed therapist. Legal basis: our legitimate interest in responding and in operating a safe directory. Retention: deleted once the conversation is closed, except records we must keep to act on a safety concern under the concern and removal policy (legitimate interest in a safe directory).
Please do not include health information about yourself or anyone else in any form on this site; we do not want it and will delete it where we see it.
Who receives data
Hosting and form processing run on Cloudflare (Cloudflare, Inc.) as our processor under its data processing addendum. Form submissions are stored in Cloudflare Workers KV and are not transmitted by email. Our submission rate limiter holds your IP address for at most one hour; Cloudflare's own edge logs are governed by its data processing addendum and retention terms. Mail to our @saudadetherapy.com addresses, and our replies, run through Google Workspace (Google Ireland Limited) as our mail provider. We use no analytics service, no advertising network, and we sell or share nothing. Where a processor operates outside the EU/EEA, transfers rely on the applicable safeguards (standard contractual clauses or an adequacy framework).
Your rights
You can ask for access to your data, correction, deletion, restriction of processing, a portable copy, and you can object to processing based on legitimate interest. Where processing rests on consent, you can withdraw it at any time with effect for the future. Write to contact@saudadetherapy.com; you also have the right to complain to the data protection supervisory authority responsible for your place of residence — and, for the controller's country, the Personal Data Protection Agency of Bosnia and Herzegovina (AZLP).
What we don't do
- No automated decision-making and no profiling.
- No tracking cookies, fingerprinting or advertising identifiers.
- No clinical records, session content or diagnoses — sessions do not run through this site at all.