Privacy policy

Last updated: October 25, 2026

This policy explains clearly how I handle the personal data you share with me through this website (www.qhhtolivia.com), the contact form, email or WhatsApp, in accordance with Regulation (EU) 2016/679 (GDPR) and Spanish Organic Law 3/2018 on the Protection of Personal Data and Guarantee of Digital Rights (LOPDGDD).

1. 1. Data controller

   The controller of your personal data is:

   • Owner: Olivia Andrasiová
   • Email: qhht.oliviaan@gmail.com

2. 2. What data I process

   I only process the data you choose to give me, plus the minimum the website needs to work:

   • Contact form: your name, email, phone number and the content of your message.
   • Email and WhatsApp: your contact details and whatever information you decide to share in the conversation.
   • Technical browsing data: IP address, browser type and date and time of access, which the hosting provider logs automatically for security reasons.

3. 3. Health data and other sensitive information

   Because of the nature of the sessions, you may want to tell me about your physical or emotional health. Please do not include this kind of information in the form: we can talk about it calmly and privately later on.

   If you choose to share it anyway, I will use it only to answer your enquiry, in the strictest confidence and on the basis of your explicit consent, which you give by sending it (Art. 9(2)(a) GDPR).

4. 4. Why I use your data

   I use your data to:

   • Answer your questions and requests for information.
   • Manage the booking of your session, if you ask me to, and contact you about it.
   • Keep the website secure and prevent abuse, such as spam.

   I do not use your data to send you advertising, I do not build profiles and I do not make automated decisions about you.

5. 5. Legal basis

   I process your data on the following legal bases:

   • Your consent (Art. 6(1)(a) GDPR), which you give by sending the form or writing to me, to answer your enquiry. You can withdraw it at any time.
   • Taking steps at your request before a contract and providing the service (Art. 6(1)(b) GDPR), when you ask for or book a session.
   • My legitimate interest (Art. 6(1)(f) GDPR) in keeping the website secure and protecting it from abuse.
   • Compliance with legal obligations (Art. 6(1)(c) GDPR), such as tax obligations, if you book a session.

6. 6. How long I keep your data

   • Enquiries that do not lead to a booking: as long as needed to reply to you and, at most, one year from our last contact.
   • If you book a session: for as long as our relationship lasts and, afterwards, for the periods required by law (for example, tax law) or needed to deal with possible claims.
   • Technical browsing logs: for the limited period set by the hosting provider.

   After these periods, the data is deleted or blocked as required by law.

7. 7. Who else has access to your data

   I do not sell or pass on your data to third parties unless the law requires it. To run the website and communicate with you, I rely on these providers, who act as data processors and may only use the data on my instructions:

   • Vercel Inc. (USA): website hosting.
   • Resend (USA): delivering the contact form messages by email.
   • Google (Gmail): the email service where I receive and answer messages.

   If you choose to write to me on WhatsApp, that service is provided by WhatsApp Ireland Ltd. (Meta) and is also governed by its own privacy policy.

8. 8. International transfers

   Some of these providers are based in the United States or may access the data from there. These transfers are made with appropriate safeguards: the EU-US Data Privacy Framework, where the provider is certified, or the standard contractual clauses approved by the European Commission (Arts. 45 and 46 GDPR).

9. 9. Your rights

   You can exercise the following rights at any time:

   • Access: find out what data of yours I process.
   • Rectification: correct inaccurate or incomplete data.
   • Erasure: ask me to delete your data.
   • Objection: object to a specific use of your data.
   • Restriction: ask me to keep your data without using it, in certain cases.
   • Portability: receive your data in a structured, commonly used format.
   • Withdraw your consent, without affecting the lawfulness of any processing carried out before.

   To exercise them, write to me at qhht.oliviaan@gmail.com stating which right you wish to exercise. I may ask for information to confirm your identity. I will reply within one month at the latest. If you feel I have not handled your request properly, you can lodge a complaint with the Spanish Data Protection Agency (www.aepd.es).

10. 10. Minors

    This website and the sessions are intended for adults. I do not knowingly process data from children under 14; if I find that a minor has given me data without the consent of their parents or guardians, I will delete it.

11. 11. Security

    I apply appropriate technical and organisational measures to protect your data against loss, misuse or unauthorised access. The website is always served over an encrypted connection (HTTPS), and access to messages is protected and limited to me as the controller.

12. 12. Cookies and local storage

    This website does not use cookies of any kind. It only stores one preference in your browser's local storage, and only if you change it yourself:

    • theme: remembers whether you prefer light or dark mode. You can delete it at any time from your browser settings.

    As it is a preference you request yourself, it is exempt from consent (Art. 22(2) of the Spanish LSSI).

13. 13. Changes to this policy

    I may update this policy to reflect changes in the law or in the service. The current version will always be published on this page, with the date it was last updated.

If you have any questions about this text, you can write to me at qhht.oliviaan@gmail.com.