Privacy Policy
Last updated: 11 October 2026
1. Who Is Responsible for Your Data?
Sara Aarosin is responsible for the processing of personal data in connection with the therapy services offered through www.saraaarosin.com.
For questions about your personal information or your rights, please contact:
Email: contact@saraaarosin.com
Website: www.saraaarosin.com
2. What Personal Information Do I Collect?
Depending on how you interact with my practice, I may process:
Your name, email address, telephone number and booking information.
Appointment history and correspondence.
Payment and accounting information.
Confidential notes from therapy sessions, where you have provided explicit consent.
Technical information collected through the website, as explained in the cookie settings.
Therapy notes may contain sensitive personal information, including information about relationships, mental health, sexual wellbeing and personal experiences.
3. Why Do I Process Your Information?
Bookings and therapy services
Your contact and booking information is used to arrange appointments, communicate with you and provide the services you request.
The legal basis is Article 6(1)(b) of the GDPR.
Accounting and legal obligations
Relevant financial information is processed to meet applicable accounting and legal requirements.
The legal basis is Article 6(1)(c) of the GDPR, where applicable.
Confidential therapy notes
With your voluntary, explicit consent, I may record and use confidential therapy notes to support continuity, preparation and progress throughout the therapeutic process.
The intended legal bases are Articles 6(1)(a) and 9(2)(a) of the GDPR, subject to confirmation of their applicability.
Consent to therapy notes is optional and is not required to receive therapy.
4. Confidentiality and Security
Personal information is handled confidentially and with respect for your privacy.
I use access controls and other appropriate security measures to protect personal information against unauthorised access, disclosure, loss or misuse.
Information is only disclosed where there is an appropriate legal basis or legal obligation.
5. Third-Party Services
I use external services to operate my practice, including:
Squarespace: Website hosting and contact forms.
Acuity Scheduling: Appointment bookings and intake forms.
Google Workspace: Business email, calendar management and online sessions through Google Meet.
Weglot: Website translation, where enabled.
These services may process personal information in connection with their functions. Their respective roles, contractual safeguards and any transfers outside the EU/EEA are subject to the applicable service agreements.
The provider used for storing confidential therapy notes will be specified once the storage arrangements have been finalised.
6. How Long Is Information Stored?
Personal information is retained only for as long as necessary for its intended purpose or as required by applicable legislation.
Therapy notes
Therapy notes are reviewed at least once a year to assess whether continued retention is necessary.
The proposed maximum retention period is three years after the most recent therapy session, subject to confirmation of the applicable legal requirements and the necessity of that period.
Notes may be deleted earlier if they are no longer necessary.
Where processing is based on consent, withdrawal of consent will result in the cessation of consent-based processing and deletion without undue delay, unless another lawful basis requires or permits continued retention.
Booking and correspondence records
Booking records and ordinary client correspondence are retained only for as long as necessary for administration, contractual matters and continuity of service.
As a general rule, these records are reviewed regularly and retained for a maximum of three years following the client's most recent session, unless a longer retention period is necessary for a specific legal, contractual or documentation purpose.
Information that forms part of accounting or bookkeeping records may be retained for the longer period required by applicable legislation.
Accounting records
Accounting material that is subject to Danish bookkeeping requirements is retained for the period required by applicable legislation, generally five years from the end of the relevant financial year.
8. Cookies
This website uses cookies and similar technologies for essential website functionality and, where enabled, additional purposes.
You can manage your cookie preferences through the website's cookie settings.
Non-essential cookies are subject to the applicable consent requirements.
9. Changes to This Policy
This Privacy Policy may be updated to reflect changes in the practice, data processing activities or applicable legislation. The latest version will be available on this website.