Client Privacy Notice (Psychotherapy)
Last updated: 2 January 2026

1) Data controller

Camilo Henríquez (Camilo’s Therapy)
CVR: 41714581
Address: Holme Møllevej 2, 2th, 8260 Viby, Denmark
Email: contact@camilostherapy.dk
WhatsApp: +45 60 90 92 30

2) What data I process

To provide psychotherapy and manage the practice, I may process:

  • Identity and contact details: name, email/phone, and (only if necessary) address for invoicing.
  • Appointment and communication data: bookings, confirmations, and practical messages.
  • Clinical information (health data): information you share in sessions and relevant background information for assessment/treatment.
  • Clinical notes and treatment planning: brief notes, goals, interventions, and progress.
  • Questionnaires/assessments: responses and results if we use any screening tools or forms.
  • Payment and invoicing data: payment references and invoice documentation (MobilePay/Revolut/bank transfer).

3) Why I process your data

Your data is processed to:

  • Provide psychotherapy and maintain continuity of care
  • Manage scheduling, communication, invoicing, and bookkeeping
  • Meet legal/professional obligations (record keeping and accounting)
  • Maintain quality, safety, and appropriate documentation of services

4) Legal basis (GDPR)

General personal data is processed based on:

  • Art. 6(1)(b) (contract / steps before entering a contract)
  • Art. 6(1)(c) (legal obligations, e.g., bookkeeping)
  • Art. 6(1)(f) (legitimate interests for administration, security, and documentation)

Health data (special category data) is processed because it is necessary for healthcare/psychological treatment and professional practice (including confidentiality safeguards):

  • Art. 9(2)(h)

5) Where your data is stored and who has access

Your client information is stored in secure systems used for my practice (e.g., encrypted local device and Google Workspace/Drive). Access is restricted to me.

I do not share your information with third parties unless:

  • you request it or give consent (e.g., coordination with another professional), or
  • it is necessary for administration (e.g., accountant), or
  • required by law.

6) Tools and service providers

I use service providers to run parts of the practice:

  • Google Workspace (email, Google Meet for video sessions, storage)
  • Calendly (appointment scheduling)
  • Zoho Forms (questionnaires/forms, if used)

These providers may process personal data on my behalf under data processing agreements where required.

7) Communication (Email and WhatsApp)

Email and WhatsApp are used mainly for scheduling and practical communication.

  • Please avoid sending highly sensitive clinical details via WhatsApp or website forms.
  • WhatsApp is not suitable for emergencies.
  • If you prefer not to use WhatsApp, we can use email only.

8) International transfers

Some providers may process data outside the EU/EEA. Where relevant, transfers rely on safeguards such as Standard Contractual Clauses (SCCs) and additional measures described in providers’ terms.

9) Retention

  • Clinical notes / client records: kept for at least 5 years after the last entry in the record, in line with Danish psychologist record-keeping guidance for private practice. Dansk Psykolog Forening+2Retsinformation+2
  • Accounting documentation (invoices/receipts): kept for 5 years in line with Danish bookkeeping requirements (typically counted from the end of the financial year). Danish Business Authority+2Collectia+2
  • Records may be kept longer if needed for complaint handling, documentation, or legal claims.

10) Your rights

You can request access and rectification.

In some cases you can request deletion or restriction; however, deletion may be limited where records must be kept due to legal/professional obligations (e.g., record keeping and bookkeeping). Dansk Psykolog Forening+1

11) Complaints

You can contact me with questions. You also have the right to complain to the Danish Data Protection Agency (Datatilsynet).

‍