Practice information
Privacy Notice
Updated 4 October 2026
This notice explains how Viktoria Loginova uses personal information when you visit VINAPSY, contact the practice or receive counselling or hypnotherapy. For browser storage and optional measurement choices, read the Cookie Policy.
Who is responsible
Viktoria Loginova is the individual practitioner and data controller. Contact Viktoria about privacy using the enquiry form, telephone 07446 196403, or write to VINAPSY, 11 St John’s Road, Stourbridge, DY8 1EJ, England.
Information we use
We use the name, contact details, message and appointment preferences you provide to respond to an enquiry and discuss working together. The website records a reference and delivery status so an accepted enquiry can be followed up. Please keep an initial message brief and avoid detailed medical or therapy history; you can ask how to share sensitive information appropriately.
If you become a client, the practice uses information needed to provide sessions, keep confidential paper notes and administer payments. Sessions are not recorded; AI note-taking in Zoom and Google Meet is switched off. Most information comes directly from you. We will explain any relevant information received from another person.
Why we use it
- Enquiries and appointments: to take steps at your request before an agreement or provide an agreed service, under UK GDPR Article 6(1)(b).
- Legal obligations: to meet applicable accounting and other legal duties, under Article 6(1)(c).
- Security and administration: our legitimate interests in protecting the website, preventing abuse, and handling complaints or claims, balanced against your rights, under Article 6(1)(f).
- Optional measurement: your consent, under Article 6(1)(a). You can refuse or withdraw it without losing access to the website or enquiry form.
Information about your health and therapy is particularly sensitive. It is used to respond to your request and provide confidential care. Viktoria explains confidentiality and its legal and safeguarding limits before work begins. Please use the initial enquiry form for a brief question or appointment request rather than a detailed health history.
Who receives information
Viktoria handles your enquiry. An authorised technical administrator has access only as needed to maintain and secure the systems. Hosting, security, email and booking providers process information to deliver these services. Access to enquiry records and backups is restricted.
Calendly is used for booking links. Remote sessions may use Google Meet or Zoom, with the platform agreed before the appointment. Payment can be arranged by bank transfer or PayPal. These providers have their own privacy information. Information may also be shared as needed with a confidential supervisor or professional adviser, to meet a legal requirement, or to address a serious safety concern.
Enquiry messages and contact details are not sent to Google as measurement data. We do not use AI to assess enquiries or make automated decisions about your care.
Cookies and measurement
Optional Google Analytics measures general website use after Analytics consent. Google Ads measurement requires both Analytics and Advertising permission. Enquiry messages, contact details and clinical page names are excluded from measurement events. With both permissions, advertising click identifiers can connect an advert with an enquiry. Personalised advertising and health-based remarketing are not enabled.
You can refuse or withdraw optional consent through Cookie Preferences. The website and its security checks continue to work. Read the Cookie Policy.
How long information is kept
The practice's agreed retention schedule is 12 months after the last meaningful contact for an enquiry that does not lead to therapy, and seven years after the last session for adult therapy records. Records for people treated while under 18 are reviewed at age 25, or 26 where treatment ended at 17; a later adult period may apply. A documented safeguarding, legal, complaint or insurance reason can require a longer period.
Financial records are retained for the period required by applicable tax law. Browser consent choices last up to 180 days. Retention periods are the practice's review and disposal policy, rather than a promise of automatic deletion on a particular day. Restricted backup copies may remain until they are replaced or expire. You can contact Viktoria to ask about a record or request deletion, subject to applicable legal exceptions.
Young people and confidentiality
The practice accepts some clients under 18. Consent, safeguarding, confidentiality and parental involvement will be discussed before work begins. Young people can ask what information is held and why. A parent or carer does not automatically receive all confidential information: rights, understanding, safety and legal duties must be considered.
Paper notes are kept in a locked cabinet accessible to Viktoria. At the appropriate time they can be shredded or confidentially destroyed. Information is treated in confidence. Disclosure may be necessary where the law requires it or to address a serious safety or safeguarding concern.
Providers outside the UK
Some service providers operate internationally and may process information outside the UK, including in the United States. Email is provided by MXroute, a US company; its privacy terms and data-handling information explain its approach. Booking, video, payment and optional Google services are also subject to the relevant provider's privacy terms.
You can ask Viktoria about the providers used for your information, their processing locations and applicable transfer arrangements. If you prefer not to send sensitive information through the website or email, call the practice to discuss how to share it.
Your rights
Depending on the circumstances, you may request access, correction, deletion, restriction, portability, or object to certain uses of your information. You can withdraw consent where it is the basis for processing. These rights have legal conditions and exceptions; withdrawal does not change the lawfulness of earlier use. We may need to confirm your identity before disclosing confidential information.
Contact Viktoria about privacy using the enquiry form. You can also raise a concern with the Information Commissioner's Office.
Changes
We will update the date on this page when the notice changes, and give additional information about significant changes where needed.