Privacy Policy

Last Updated: May 31, 2025

1. Introduction

Christina Archontous, Licensed School Psychologist & Leadership Specialist, is committed to protecting your privacy and the confidentiality of your personal data. This Privacy Policy outlines how I collect, use, store, and protect your personal information in accordance with the General Data Protection Regulation (EU) 2016/679 (“GDPR”), relevant Cyprus data protection laws, and professional ethical guidelines for psychologists.

This policy applies to all personal data collected when you use my services, engage in psychological evaluation, participate in DISC Assessments, attend training sessions, or interact with my practice (e.g., through my website, email, phone, or in person).

2. Who I Am

Christina Archontous, Licensed School Psychologist & Leadership Specialist
info@christianaarchontous.com
+357 99259088
Protara 150, Paralimni
www.christianaarchontous.com

3. Information I Collect

I collect various types of information necessary for providing my psychological services, evaluations, DISC Assessments, and training. This includes both personal data and, where applicable, special categories of personal data (sensitive data).

3.1 Information You Provide Directly:

  • Contact Information: Your name, address, email address, phone number.

  • Demographic Information: Date of birth, gender, marital status, occupation.

  • Health and Psychological Information (Sensitive Data): This may include your mental and physical health history, presenting issues, previous diagnoses, treatment history, family history relevant to your psychological well-being, psychological assessment results (e.g., results from psychological evaluations or DISC Assessments), session notes, and any other information you disclose during therapy, evaluation, or training. This data is only collected with your explicit, informed consent.

  • Payment Information: Details required for billing and payment processing (e.g., bank details, credit card information), though direct card details are often processed by third-party payment gateways.

  • Information related to DISC Assessments and Training: Information provided during the assessment process or during training registration (e.g., responses to assessment questions, professional background).

3.2 Information Collected Automatically (if applicable via website):

If you visit my website, certain information may be collected automatically through technologies like cookies. This may include:

  • Your IP address.

  • Browser type and version, operating system.

  • Referring URLs, date and time of visit.

  • Pages viewed and time spent on pages.

This data helps to understand website usage and improve the online experience. For more information on how cookies are used on my website, please refer to my Cookie Policy.

4. How I Use Your Information (Purposes and Legal Basis)

I use your personal data for specific, legitimate purposes based on the following legal grounds under GDPR:

  • For the provision of psychological services, evaluation, DISC Assessments, and training (Contractual Necessity / Legitimate Interest): To fulfil my professional obligations to you, provide appropriate care, conduct assessments, and deliver training.

  • To comply with legal and ethical obligations (Legal Obligation): This includes maintaining professional records as required by law (e.g., professional bodies, tax authorities), adhering to ethical codes of conduct for psychologists, and responding to legal requests (e.g., court orders).

  • For communication (Legitimate Interest / Consent): To contact you regarding appointments, billing, or to respond to your inquiries. For marketing communications (e.g., newsletters), I will rely on your explicit consent.

  • For billing and administrative purposes (Contractual Necessity / Legitimate Interest): To manage my practice, process payments, and maintain accurate financial records.

  • For clinical supervision and professional consultation (Legitimate Interest / Public Interest): In some cases, and always maintaining strict anonymity, I may discuss aspects of your case with a clinical supervisor or peer consultant to ensure the highest quality of care and professional development. Your identity will never be revealed without your explicit consent.

  • To improve my services (Legitimate Interest): To analyze trends and gather broad demographic information for internal use, always in an anonymized or aggregated form where possible.

Processing of Special Categories of Personal Data (e.g., health data): This data is processed only with your explicit consent or where necessary for the provision of health or social care and treatment, or if required by law for reasons of substantial public interest.

5. Confidentiality and Sharing Your Information

Confidentiality is a cornerstone of psychological practice. Your personal and sensitive data is treated with the utmost confidentiality. I do not share, sell, trade, or otherwise transfer your personal data to outside parties, except in the following very limited circumstances:

  • With Your Explicit Consent: For example, if you request that I share information with another healthcare professional, family member, or school.

  • To my Clinical Supervisor/Consultant: As mentioned above, for professional development and quality assurance, always maintaining strict anonymity.

  • Professional Service Providers: I may use trusted third-party service providers (e.g., secure online platforms for video sessions or assessments, accounting services, IT support) who assist me in operating my practice. These providers are carefully selected, contractually bound to confidentiality, and only process data according to my instructions and in compliance with GDPR.

Legal and Ethical Mandates:

  • Duty to Warn: If there is a serious and immediate risk of harm to yourself or others, I may be legally and ethically obligated to break confidentiality to ensure safety.

  • Child Protection: If I believe a child is at risk of abuse or neglect, I am legally obligated to report this to the relevant authorities.

  • Court Order: If legally compelled by a court order, I may be required to disclose certain information.

  • Regulatory Bodies: In response to lawful requests by professional or regulatory bodies to whom I am accountable.

  • Emergency Situations: In a life-threatening emergency where you are unable to give consent.

6. Data Retention

I retain your personal data and clinical records for as long as necessary to fulfill the purposes for which it was collected, including satisfying any legal, ethical, accounting, or reporting requirements. Professional ethical guidelines and national laws often mandate specific minimum retention periods for psychological records (e.g., typically 10–15 years after the last contact, or longer for minors). After this period, records are securely destroyed.

7. Your Data Protection Rights (GDPR)

Under GDPR, you have the following rights concerning your personal data. Please note that these rights are not absolute and may be subject to legal and ethical limitations applicable to a psychologist’s practice.

  • The Right to Access

  • The Right to Rectification

  • The Right to Erasure (“Right to be Forgotten”)

  • The Right to Restrict Processing

  • The Right to Object to Processing

  • The Right to Data Portability

  • The Right to Withdraw Consent

To exercise any of these rights, please contact me using the contact details provided below. I will respond to your request within one month.

You also have the right to lodge a complaint with the Office of the Commissioner for Personal Data Protection in Cyprus if you believe that your personal data is being processed unlawfully.

Website: www.dataprotection.gov.cy
Email: commissioner@dataprotection.gov.cy
Tel: +357 22 818 456

8. Data Security

I take the security of your personal data very seriously. I implement appropriate technical and organizational measures to protect your data from unauthorized access, accidental loss, destruction, alteration, or disclosure. These measures include:

  • Secure storage of paper and electronic records.

  • Use of encrypted communication channels where appropriate.

  • Password protection and access controls for digital files.

  • Regular review of security practices.

9. Children’s Privacy

If you are under 18 years of age, I will require the explicit consent of your parent or legal guardian for the provision of psychological services. I do not knowingly collect personal data from children without appropriate parental consent. If I become aware that personal data from a child has been collected without verified parental consent, I will take steps to remove that information.

I ensure that all services involving minors are conducted in full compliance with the ethical guidelines of the Cyprus Psychologists’ Association and applicable child protection laws.

10. Changes to This Privacy Policy

I may update this Privacy Policy from time to time to reflect changes in my practices, legal requirements, or professional standards. I will notify you of any significant changes by posting the updated policy on my website (if applicable) or by direct communication. The “Last Updated” date at the top of this policy will indicate when it was last revised.

11. Contact Me

If you have any questions about this Privacy Policy, your personal data, or your rights, please do not hesitate to contact me:

Christina Archontous, Licensed School Psychologist & Leadership Specialist
Email: info@christianaarchontous.com
Phone: +357 99259088

 

Scroll to Top