Privacy Policy

Last updated: 12 October 2026

1. Who is responsible for your data

The website elenanekrasova.com is run by Elena Nekrasova, practising psychologist ("I", "me"). I am responsible for the personal data you leave on this website. For any questions about your data, please write to: helenpsyhology@gmail.com.

2. What data I receive

Through the "Contact me" form: how you would like to be addressed, your email address, your phone number and preferred messenger, and a comment if you leave one. I need at least one way to contact you in order to reply; without it I cannot answer your request. All other fields are optional.

If you message me on WhatsApp or Telegram, call me or email me, I receive the data you send through those services.

Please do not include details about your health or other personal circumstances in the form or in your first message: it is enough to say briefly which consultation you are interested in — we will discuss everything else in person. If such details do end up in your request, I use them only to reply to you, delete them as soon as they are no longer needed for that, and in any case on your request.

3. Why I use your data and on what legal basis

To reply to your enquiry and arrange a consultation. Legal basis: your request and steps taken at your request before entering into a contract (Art. 6(1)(b) GDPR). I will inform you separately about how data is handled during the consultations themselves before they begin.
To see general statistics of website visits (section 5). Legal basis: my legitimate interest in understanding how the website works (Art. 6(1)(f) GDPR). You may object to this processing by writing to me.

I do not use your data for advertising, I do not sell it, and I do not make automated decisions based on it.

4. Who receives the data

Tilda Publishing — the platform the website and the contact form run on. Tilda processes data on my behalf under its Data Processing Agreement (tilda.cc/dpa); data is stored on servers in the EU, backups in the USA.
Telegram (Telegram FZ-LLC, UAE) — a notification about a new request is sent to my private Telegram chat so that I can reply quickly.
Hosting provider of the statistics server (Germany) — see section 5.
Google (Gmail) — a copy of the request is sent to my email.
If you message me on WhatsApp or Telegram yourself, your messages are processed by those messengers under their own terms.

Transfers outside the European Economic Area:

Google and WhatsApp (Meta), USA — on the basis of the European Commission's adequacy decision (EU–U.S. Data Privacy Framework);
Tilda (backups in the USA, administration from the UAE) — on the basis of the EU Standard Contractual Clauses included in Tilda's DPA;
Telegram, UAE — there is no adequacy decision for the UAE; the request notification is sent to Telegram because this is necessary to respond to your request for a consultation (Art. 49(1)(b) GDPR), and it is deleted within the periods set out in section 6.

You can request a copy of the safeguards from me by email.

5. Website statistics

For statistics I use Umami, installed on a server in Germany (EU). It does not use cookies and does not store visitors' IP addresses in the statistics database. It records which pages are opened, which website the visitor came from (for example Instagram or Google), country, device type, browser language and clicks on the contact buttons (WhatsApp, Telegram, phone, email, form submission). Parameters in page addresses are not stored. I see the statistics without names or contact details. Statistics data is deleted automatically after 13 months.

In addition, the Tilda platform keeps its own built-in visit statistics (pages, referral source, country, device); its cookies are disabled on this website.

No advertising or marketing cookies are used on the website.

6. How long data is kept

If a request or conversation did not lead to a consultation, I delete it no later than 12 months after our last contact. If we work together, data is kept for the duration of our work and afterwards for as long as professional rules and the law require. Copies of requests in Telegram and in my email are deleted within the same periods.

7. Your rights

Under the GDPR you can:

find out what data I hold about you and receive a copy;
correct inaccurate data;
ask me to delete your data or restrict its use — I will consider the request taking into account the exceptions provided for in Articles 17 and 18 GDPR;
object to processing based on legitimate interest;
receive the data you provided to me in a structured, machine-readable format (Art. 20 GDPR).

To do so, write to helenpsyhology@gmail.com. I will reply within one month; for complex requests this period may be extended by two further months, in which case I will let you know within the first month.

You also have the right to lodge a complaint with a data protection supervisory authority in the EU country where you live, work or where you believe the infringement took place.

8. Consultations for children and teenagers

A request for a consultation for a child or teenager should be submitted by a parent or legal guardian.

9. Changes to this policy

I may update this policy. The current version is always available on this page, with the date of the last update shown at the top.

← Back to the website