top of page

Privacy Policy

Last updated: 5/05/2026
 

1. Who We Are

​

This website and services are operated by:

Pierpaolo Paparo
Sole trader
Based in Boulogne-Billancourt, France

For any questions about this policy or your personal data, you can contact:
📧 hello@selfdiscoveryways.com

2. A Privacy-First Approach

​

As a therapist, confidentiality is not just a legal requirement — it is central to the way I work.

I am committed to:

  • Protecting your personal data

  • Keeping your information secure

  • Only collecting what is necessary

  • Never using sensitive personal information for marketing
     

3. What Data We Collect

​

Depending on how you interact with the website or services, we may collect:

a) Enquiry & Contact Data

  • First name

  • Email address

  • Any information you choose to include in your message

b) Booking & Administrative Data

  • Contact details

  • Appointment history

  • Basic communication records

c) Therapy Data (Sensitive Data)

If you become a client, additional personal and health-related information may be collected as part of providing therapy.

This may include:

  • Personal background information

  • Notes from sessions

⚠️ This is considered special category data under General Data Protection Regulation Article 9 and is handled with the highest level of confidentiality.

d) Website Usage Data

  • Basic analytics data (via Google Analytics)

  • Cookies and usage behaviour

​

4. How Your Data Is Used

​

Your data is used for the following purposes:

a) Responding to Enquiries

To reply to messages and arrange initial consultations.

Legal basis: Legitimate interest (GDPR Article 6(1)(f))

b) Providing Therapy Services

To deliver therapy sessions and maintain appropriate records.

Legal basis: Provision of healthcare (GDPR Article 9(2)(h))

c) Communication & Follow-Up

To send relevant information, updates, or resources.

Legal basis: Consent (GDPR Article 6(1)(a))
👉 You will only receive these communications if you have explicitly opted in.

d) Website Analytics

To understand how the website is used and improve the experience.

Legal basis: Consent (via cookie banner)

5. How Your Data Is Stored

Therapy Data

  • Stored locally on a secure, password-protected device

  • Not stored in cloud systems

  • Not shared with third-party marketing tools

Enquiry & Marketing Data

  • Stored via Wix (website and CRM tools)

  • Limited to non-sensitive data (e.g. first name, email, enquiry status)

Key Principle

Sensitive therapy data is always kept separate from marketing and communication systems.

​

6. Data Sharing

​

Your data is never sold or shared for marketing purposes.

Data may be processed by trusted service providers (data processors), including:

  • Wix – website, forms, CRM

  • Google Analytics – website analytics

  • Google – scheduling tools (e.g. calendar)

  • EU-based payment providers (to be confirmed)

All providers are selected with GDPR compliance in mind.

 

7. Marketing & Communication

 

You will only receive emails if you have clearly opted in.

  • You can unsubscribe at any time

  • Marketing communications will never include sensitive personal or health-related information

This follows the ePrivacy Directive

 

8. Data Retention

​

  • Enquiry data: Up to 12 months

  • Client records: Up to 2 years after the end of therapy

Data is only kept as long as necessary and then securely deleted.

 

9. Your Rights

Under GDPR, you have the right to:

  • Access your data (Article 15)

  • Correct inaccurate data (Article 16)

  • Request deletion (Article 17)

  • Restrict processing (Article 18)

  • Withdraw consent at any time

To exercise any of these rights, please contact:
📧 hello@selfdiscoveryways.com

 

10. Confidentiality

As a therapist, I am also bound by professional confidentiality obligations under French law, including:

  • Code pénal Article 226-13

This means your personal information is treated as strictly confidential, beyond standard data protection requirements.

 

11. Cookies

This website uses cookies for analytics and basic functionality.

  • A cookie banner allows you to accept or reject non-essential cookies

  • You can change your preferences at any time

​

12. Data Security

Appropriate technical and organisational measures are in place to protect your data, including:

  • Secure devices

  • Password protection

  • Restricted access

  • Separation of sensitive and non-sensitive data

​

13. Changes to This Policy

This policy may be updated from time to time to reflect legal or operational changes.
The latest version will always be available on this page.

bottom of page