Privacy Policy

Last updated: 14.02.2026

1. Introduction

This Privacy Policy explains how Carmen Stork ("we", "us", or "our") collects, uses, and protects your personal data when you visit our website carmenstork.com or use our counselling and yoga services. We are committed to protecting your privacy in accordance with the General Data Protection Regulation (GDPR) and Belgian data protection law (Loi du 30 juillet 2018).

2. Data Controller

The data controller responsible for your personal data is:

Carmen Stork

Psychological Counselor & Yoga Teacher

Rue Longue 27

1950 Kraainem, Belgium

Email: carmen@carmenstork.com

3. Personal Data We Collect

We may collect and process the following categories of personal data:

Contact Information: Name, email address, phone number, and address when you contact us or book a consultation.

Consultation Data: Information you share during counselling sessions, which is treated with strict confidentiality.

Technical Data: IP address, browser type, device information, and cookies when you visit our website.

Payment Information: Billing details processed through secure payment providers for session fees.

4. Purpose and Legal Basis for Processing

We process your personal data for the following purposes:

Service Delivery: To provide counselling, parental guidance, and yoga services. Legal basis: Performance of a contract (Art. 6(1)(b) GDPR).

Communication: To respond to your enquiries and schedule appointments. Legal basis: Legitimate interest (Art. 6(1)(f) GDPR).

Website Functionality: To ensure our website functions properly and to improve user experience. Legal basis: Legitimate interest (Art. 6(1)(f) GDPR).

Legal Obligations: To comply with legal and regulatory requirements. Legal basis: Legal obligation (Art. 6(1)(c) GDPR).

5. Special Categories of Personal Data

As a psychological counsellor, we may process sensitive personal data relating to your mental or physical health. This data is processed only with your explicit consent (Art. 9(2)(a) GDPR) and is subject to professional secrecy obligations. You may withdraw your consent at any time.

6. Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by law. Counselling records are retained for a period of [X] years after the last session, in accordance with professional guidelines. Contact enquiries are retained for [X] years. Website analytics data is anonymised after 26 months.

7. Data Sharing and Third Parties

We do not sell your personal data. We may share your data with:

Website Hosting: Our website is hosted by Squarespace, Inc. (USA). Squarespace processes data in accordance with their Privacy Policy and is certified under the EU-US Data Privacy Framework.

Payment Processors: Secure payment providers for processing session fees.

Legal Authorities: When required by law or to protect our legal rights.

8. Cookies

Our website uses cookies to enhance your browsing experience. Cookies are small text files stored on your device. We use:

Essential Cookies: Necessary for the website to function properly.

Analytics Cookies: To understand how visitors use our website (e.g., Squarespace Analytics).

You can manage cookie preferences through your browser settings. Please note that disabling certain cookies may affect website functionality.

9. Your Rights

Under the GDPR, you have the following rights regarding your personal data:

Right of Access: You may request a copy of your personal data.

Right to Rectification: You may request correction of inaccurate data.

Right to Erasure: You may request deletion of your data under certain circumstances.

Right to Restriction: You may request limitation of processing.

Right to Data Portability: You may request transfer of your data in a machine-readable format.

Right to Object: You may object to processing based on legitimate interests.

To exercise these rights, please contact us at the email address provided above. We will respond within one month.

10. Complaints

If you believe your data protection rights have been violated, you have the right to lodge a complaint with the Belgian Data Protection Authority:

Autorité de protection des données / Gegevensbeschermingsautoriteit

Rue de la Presse 35 / Drukpersstraat 35

1000 Brussels, Belgium

Tel: +32 (0)2 274 48 00

Website: www.dataprotectionauthority.be

11. Data Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. All counselling information is treated with strict professional confidentiality.

12. International Data Transfers

Some of our service providers (such as Squarespace) are based in the United States. Where personal data is transferred outside the European Economic Area, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses or adequacy decisions.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated revision date. We encourage you to review this policy periodically.

14. Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact us:

Email: carmen@carmenstork.com

Address: Rue Longue 27, 1950 Kraainem, Belgium