Privacy and cookies

We collect only what we need to do what you have asked us to do, plus what keeps the site running and safe. Here is the whole of it.

When you book a session, workshop, or call. We collect your name, your email, the appointment details, and, for online sessions, a video-meeting link. We use these to arrange and run your booking and to send you confirmations and reminders.

When you pay. Card payments are handled by our payment provider, Stripe, so we never see or store your full card details. If you pay by bank transfer, we see only what the transfer shows. Either way we keep a record of the invoice and the payment.

When you fill in an enquiry, waitlist, or contact form. We collect what you put in the form, usually your name, your email, and your message, so that we can reply and help you.

When you enrol on the training. We collect what we need to run your enrolment: your contact details, your registration, your attendance, your payments, and, on the certification track, your assessment and certificate.

When you subscribe to our newsletter. If you opt in, we collect your email and add it to our mailing list, and we use it to send you occasional updates. You can unsubscribe from any email at any time, and every email carries the link to do so.

When we send you a guide or a follow-up. If you download a guide or join a waitlist, we may send you a short, related series of emails. You can stop these at any time.

When you visit the site. If you accept analytics cookies, we use Google Analytics to see, in the aggregate, how the site is used: which pages are read, and where visitors arrive from. This happens only if you accept. Until then, nothing is measured. We do not use advertising trackers.

To keep the site running and safe. Our hosting and security provider handles basic technical data, such as your IP address, so that the site loads and stays protected from abuse.

Why we can do these things. Mostly because you asked us to: running a booking, an enrolment, or a reply to your message. The newsletter, our follow-up emails and analytics happen only because you agreed to them, and you can change your mind at any time. We keep accounting records because the law requires it. And we keep the site working and safe because we have a plain interest in a site that runs and is not abused.

Some of what we do is therapeutic, and the training touches personal material, so it is worth being clear about what this website does and does not collect.

This website is a way to reach us. It is not where your therapeutic or training work happens. When you write to us through a form, tell us only what we need in order to help you take the next step, usually who you are and what you are looking for. If you want to send something personal, email the practitioner you would like to work with directly, rather than putting it into a form here. A form is not the place for detailed health information, and the practitioner is.

Where an enquiry does contain something sensitive, we treat it with particular care, we share it only with the practitioner concerned, and we act on it only so far as we need to in order to respond to you.

Once you are a client or a student, what happens is governed separately and more strictly. Session notes, constellation work, genograms and class recordings are professional and clinical records, held under professional confidentiality. The section on your records below explains how we handle them. They are not collected through this website.

We do not sell your data, and we do not share it so that anyone else can market to you.

We do use a small set of trusted services to run the practice and the training. Each one handles your data only to do its job, and only under a written data-processing agreement:

• Practico: our own booking, billing and invoicing system, which takes your bookings and prepares your invoices and payment pages
• Stripe: card payments
• Make: routing form submissions and running our admin automations
• Brevo: sending our invoice, transactional and follow-up email
• Mailchimp: running the newsletter
• Google: video-meeting links for online sessions · our email inbox · Google Analytics, only if you consent · the online classroom where training material is hosted
• Cloudflare: hosting the website and protecting its forms from spam

Some of these providers are based outside the European Union, or process data there. Where your data leaves the EU, it is protected by the safeguards the law requires, such as the European Commission's Standard Contractual Clauses.

We will also disclose data where the law requires it, for example the accounting records Belgian law obliges us to keep, or where a court or authority has the right to ask.

We keep your data only as long as we need it, and no longer. What follows is how long that is, by type. Where the law fixes a period, we say so.

When a period ends, we delete the data or make it anonymous, unless the law requires us to keep it for longer.

This section is about the records the work itself creates, not the data the website collects. We set it out here so that the whole picture is in one place, and so that this policy agrees with our training terms rather than saying anything different.

Notes and genograms. Where we make notes on your work, or a genogram in the course of it, we keep them as professional records for ten years from your last session with us, after which we delete them or make them anonymous. They are held under professional confidentiality, and we do not share them with anyone else without your signed request. Digital records are encrypted and behind two-factor sign-in. Paper records are locked away. Where we refer to another person in notes, we use initials or a coded reference kept apart from the notes.

Recordings, for the training. We record classes only where you have agreed to it, and we ask for that agreement separately for the theory lectures, the constellations, and the supervision. Refusing costs you nothing: it does not affect your place, your participation, your assessment, or your certificate. Recordings are used to support your learning and as teaching material for your group and for later groups. They are seen by our team and by students, and not shared outside that educational setting. We keep a recording as long as it stays part of the training material students can reach. As long as we hold it, you can see it too. You can withdraw your agreement at any time, which stops any new recording of you, and you can ask us to take down a recording already made. The full terms are in our training terms and conditions and in the consent you sign.

The boundary, once more. None of this is collected through the website. A message you send us through a form does not become part of a clinical record, and a clinical record is never exposed by this website.

Cookies are small files a website stores on your device. We use as few as we can, and the full, current list is in the table below.

Essential cookies keep the site working: remembering the cookie choice you made, and protecting our forms from spam. These do not need your consent, because the site cannot work without them.

Analytics cookies (Google Analytics) help us understand how the site is used. They load only if you accept them. Until you do, no analytics cookie is set.

We do not use advertising or social-media tracking cookies.

The full detail, including how the cookie banner works, is on our cookie policy page.

You made your choice when you arrived. You can change it at any time:

Under the GDPR, you can ask us at any time to:

• see what data we hold about you
• correct anything that is wrong
• delete your data
• limit or object to how we use it
• receive your data in a portable form
• withdraw a consent you have given, for the newsletter, for follow-up emails, or for analytics. Withdrawing it does not affect anything we did while it was in force.

To exercise any of these, email info@ceciliaaltieri.com. We will respond within one month.

If you believe we have mishandled your data, you can complain to the Belgian supervisory authority, the Data Protection Authority (Gegevensbeschermingsautoriteit / Autorité de protection des données), at gegevensbeschermingsautoriteit.be. We would rather you came to us first, so we can put it right.

We are established in Belgium and process your data in the European Union wherever we can. Some of our providers, named above, operate outside the EU. Where your data is processed outside the EU, we rely on the safeguards the law requires, such as the European Commission's Standard Contractual Clauses, so that your data keeps its protection wherever it goes.

If we change how we handle data, we will update this page and change the date at the top. Where a change is significant, we will make it clear.

Questions about your privacy, or about anything on this page?

Email info@ceciliaaltieri.com, or write to us at Boulevard Charlemagne 28, Brussels.

← Back to ceciliaaltieri.com