Privacy policy

Who processes your data

The data controller is Диана.БГ ЕООД, company number 204002239, registered in София, Манастирски ливади, operating the Integria psychotherapy centre. Write to office@integriacenter.com with any question about this policy.

What we collect and why

When you book a session

Your name, email, phone and the language we write to you in. We need these for the session to exist, to send you a confirmation and to reach you if something has to change urgently. The basis is performance of the contract between you and us.

The "Note" field is optional and stays empty unless you fill it in. If you write something there about your health or your state, that is a special category of personal data and is processed only because you chose to share it — on the basis of your explicit consent. You do not need to fill it in to book a session.

When you pay

Payment happens at Stripe. Your card details never pass through our site; we neither see them nor store them. What stays with us is the amount, the currency, the payment status and the references Stripe uses to identify it. The basis is performance of the contract and — for invoices — a legal obligation.

Your bank statement shows only "INTEGRIA", with no description of the service. That is deliberate: a statement can be seen by someone else.

When you sign in

You choose: a one-time code by email, a passkey, or signing in with Google or Apple. With a passkey we hold the public key; it cannot unlock anything else and it is not biometric information. With Google or Apple we receive an identifier and an email address, but no password.

For every sign-in attempt we record the time, method, outcome, IP address and browser. This protects your account against someone else getting into it, on the basis of our legitimate interest in keeping accounts secure.

When you switch something on

• Browser notifications — we keep the subscription address and its keys. Only if you asked for it, and you can switch it off at any time.
• Calendar address — a secret address that shows your sessions in your own calendar app. It can be revoked from your profile.
• Waiting list — your preferred days and times and how long you remain interested.
• Group application — name, email, phone and whatever you wrote in the application.

If you come through an employer

An employer code links you to the organisation's contract, but it does not link the organisation to you. The employer receives only aggregate numbers, and only when enough people are involved that no one can be identified. In detail: How confidentiality works.

What we do not collect

• National identity numbers. We do not need one and do not ask for one, neither at booking nor at payment.
• Card details. They never pass through us.
• Clinical notes. The content of sessions is neither kept nor stored in this system.
• Tracking. No Google Analytics, no social pixels, no advertising cookies. The only cookies this site sets are the ones without which signing in and form protection do not work.

Who has access

Access is by role, not by goodwill. Diana sees the sessions and the people she works with. The accountant sees payments and invoices but has no access to the clinical side — that is a constraint in the system itself, not an internal understanding. Every action in the staff area is written to a log that cannot be edited.

Processors we use

• Stripe — payments.
• Cloudflare — protecting and speeding up the site.
• An outgoing mail provider — confirmations and reminders.
• A hosting provider — the server the system runs on.
• Google, Apple or Mozilla — only if you switched on browser notifications; they deliver the notification without seeing anything about your health.

There is a processing agreement with each of them. Data is stored in the European Union; where a provider also processes data outside it, that happens on the basis of an adequacy decision or standard contractual clauses.

Who is controller and who is processor is decided for each processing activity separately, not once for the whole service. For individual psychotherapy we are the controller; for corporate programmes the roles are settled in the contract with the organisation, per data flow.

How long we keep it

• Invoices and accounting records — for the statutory periods, up to ten years.
• Bookings and payments — five years, the limitation period for possible claims.
• Sign-in records with IP address — twelve months.
• The staff audit log — for the life of the system. It is a hash chain, and erasing an old entry would destroy the ability to show that the rest have not been altered. That is why it holds no IP address in the clear, only a fingerprint.
• Any note you wrote — deleted on request at any time.

Your rights

You have the right of access to your data, and to rectification, to erasure where the applicable legal conditions are met, to restriction of processing, portability and objection. Erasure has limits: invoices and accounting records are kept by law and cannot be deleted on request. Any consent you gave can be withdrawn at any time, without affecting the lawfulness of processing before the withdrawal.

Some of it you can do yourself: your profile has a "My data" page where you can see what we hold about you and download it. For the rest, write to us and we answer within one month.

We take no automated decisions about you and do not profile you. No algorithm assesses your state, categorises you, or prioritises who gets seen.

How we protect it

We apply technical and organisational measures matched to how sensitive the data is: access is by role, staff actions are written to a log that cannot be edited, and staff sign in only with a key held on their device.

Data travels over an encrypted connection and is stored encrypted at rest. This is not end-to-end encryption: the system can read the content in order to work. No system is completely secure and we do not promise you that it is.

Recordings and artificial intelligence

No audio or video recordings are made of therapy sessions. We do not use artificial intelligence to analyse therapeutic content, to assess someone's state, or to rank people by risk. If that ever changes, it will be described here before it starts, not after.

If you think something is wrong

Write to us first at office@integriacenter.com — almost everything is settled that way. You also have the right to complain to the Bulgarian Commission for Personal Data Protection, Sofia 1592, 2 Prof. Tsvetan Lazarov Blvd, cpdp.bg.