Last updated: October 16, 2026

1. Introduction

Your privacy is extremely important to me. This Privacy Policy explains how ACTualize Psychology collects, stores, uses and protects your personal information, in line with the General Data Protection Regulation (GDPR/AVG) and applicable Dutch legislation.

This policy applies to anyone who:

  • visits my website;
  • contacts me about my services;
  • books an appointment;
  • attends therapy sessions;
  • completes questionnaires or therapeutic exercises;
  • uses any services provided by ACTualize Psychology.

2. Data controller

3. What personal data I collect

Depending on our relationship, I may collect the following information.

Before therapy

  • name
  • email address
  • telephone number
  • preferred language
  • preferred session type
  • address
  • emergency contact
  • your general practitioner's (GP's) contact details
  • basic information you choose to share during our first contact

During therapy

If we start working together, I may also collect:

  • clinical assessment information
  • session notes
  • completed questionnaires
  • values exercises
  • homework completed between sessions
  • relevant medical or psychological history that you choose to share
  • email correspondence relating to therapy
  • appointment history
  • invoices and payment records

When you visit my website

Basic technical and usage information, collected through cookies and similar technologies. Section 9 explains which tools I use and when.

I only collect information that is relevant to providing safe and effective psychological care.

4. Special category data

As a psychologist, I process special category personal data concerning health. This information receives additional legal protection under the GDPR. I process it solely to provide psychological services and to meet my professional and legal obligations.

5. How your information is used

Your information is used to:

  • provide psychological support;
  • arrange appointments;
  • communicate with you;
  • prepare and deliver therapy sessions;
  • maintain clinical records;
  • issue invoices;
  • comply with legal obligations;
  • improve the quality of my services.

Your information is never sold. I never use your name, contact details, booking details or anything from our sessions for advertising. The only thing my ads measure is whether a website visit that started with one of my Google ads led to a booking (see section 9).

6. Legal basis for processing

Under the GDPR, I process your personal information on one or more of the following legal bases:

  • performance of a contract;
  • your explicit consent (where required), including your consent to analytics and advertising cookies on my website;
  • compliance with legal obligations;
  • provision of healthcare services;
  • legitimate interests relating to the safe operation of my practice.

7. Confidentiality

Everything discussed during therapy is confidential. Information will never be shared with third parties without your consent, unless I am legally or ethically required to do so. Examples include:

  • immediate risk of serious harm;
  • safeguarding concerns;
  • court orders;
  • legal obligations under Dutch law.

Where possible, I will always discuss this with you beforehand.

If I suddenly become unable to work, my appointed clinical executor (named in my clinical will) may access limited information, only to inform clients and arrange an appropriate ending or onward support.

8. Professional supervision

To maintain high standards of practice, I regularly attend professional clinical supervision. Supervisors are bound by the same confidentiality obligations as psychologists. Only information necessary for supervision is discussed, and identifying details are kept to a minimum wherever possible.

9. Third-party services

To provide my services safely and efficiently, I use a number of trusted third-party providers. They process only the information needed to perform their services and are expected to comply with applicable privacy legislation.

PsychFlex

PsychFlex is used to provide questionnaires, exercises and therapeutic materials between sessions. Only information necessary to support your therapy is stored within the platform. For more information, please see PsychFlex's own privacy policy.

Calendly

If you book directly through my website, appointment scheduling is managed through Calendly. Calendly stores your name, email address and appointment details solely for scheduling purposes.

It's Complicated

Some clients choose to book therapy through It's Complicated. When you use this platform, It's Complicated collects and processes certain personal information required to operate its marketplace, including account information, booking details and payment information. ACTualize Psychology receives only the information necessary to provide your therapy services.

Clinical notes, therapeutic formulations and treatment records created by ACTualize Psychology remain my responsibility as your psychologist. For more information about how It's Complicated processes your personal information, please see their privacy policy.

Payment providers

Payments may be processed through:

  • Mollie
  • It's Complicated
  • bank transfer (KNAB)

Neither ACTualize Psychology nor I store your full payment card details.

Website analytics and advertising

My website uses Google Analytics (through Google Tag Manager) to understand how visitors use the site and to improve it. Information collected includes:

  • browser type;
  • operating system;
  • pages visited;
  • time spent on pages;
  • general location;
  • referring websites.

I also advertise with Google Ads. If you arrive on my website through one of my ads, Google Ads measures whether that visit led to a booking, so I can see which ads help people find me. I don't send Google your name, email address or booking details.

Analytics and advertising cookies are only placed if you accept them in the cookie banner. If you decline, Google may still receive limited signals that don't use cookies (for example, that a page was viewed), which it uses to estimate results. This information is anonymized wherever possible.

Some of these providers (such as Google and Calendly) may process data outside the European Union. Where that happens, it takes place under the safeguards the GDPR requires, such as standard contractual clauses or the EU-US Data Privacy Framework.

10. Data storage

Personal information is stored securely, using password-protected systems and appropriate technical and organizational safeguards. Reasonable measures are taken to prevent:

  • unauthorized access;
  • accidental disclosure;
  • loss;
  • misuse;
  • alteration.

No electronic system can ever be completely secure, but every reasonable effort is made to protect your information.

11. Clinical records

Dutch healthcare legislation requires psychologists to keep client records. These records generally include:

  • intake information;
  • clinical notes;
  • correspondence relevant to therapy;
  • invoices where required.

Clinical records are kept for 20 years, unless legislation requires otherwise.

12. Data retention

If you inquire about therapy but decide not to go ahead, your information will normally be deleted within a reasonable period, unless legal obligations require otherwise.

If you become a client, your records will be kept in line with Dutch healthcare legislation (see section 11). After the legal retention period ends, your information will be securely deleted or anonymized.

13. Your rights

Under the GDPR, you have the right to:

  • access your personal information;
  • request correction of inaccurate information;
  • request deletion where legally possible;
  • restrict processing;
  • object to processing;
  • receive a copy of your information where applicable;
  • withdraw consent where processing is based on consent;
  • lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens).

Because psychologists are legally required to keep clinical records, it may not always be possible to delete all information right away.

14. Cookies

My website uses cookies and similar technologies to make the site work and, only with your consent, for analytics and advertising measurement (see section 9). You can change your choice at any time through the cookie icon at the bottom left of the website, or in your browser settings.

15. International clients

ACTualize Psychology provides online therapy to clients in different countries. Wherever you are located, your personal information is processed in line with the GDPR and applicable Dutch legislation. Clients are responsible for making sure that online psychological services are legally permitted in the country from which they attend sessions.

16. Changes to this Privacy Policy

This Privacy Policy may occasionally be updated to reflect changes in legislation, professional guidance or practice procedures. The most recent version is always available on this page.

17. Contact

If you have any questions about this Privacy Policy or want to exercise your GDPR rights, please contact:

Szofi Németh MSc
ACTualize Psychology
Email: szofi@actualizepsychology.com
Website: www.actualizepsychology.com

18. Complaints

If you're unhappy with how your personal information has been handled, I encourage you to contact me first, so we can try to resolve it together. You also have the right to lodge a complaint with the Autoriteit Persoonsgegevens (Dutch Data Protection Authority): www.autoriteitpersoonsgegevens.nl.