Legal

Privacy Policy

Last updated: August 2, 2026

Touchstudio, located in Antwerp (contact details available via touchstudio.be), is responsible for the processing of personal data as outlined in this privacy policy. As a therapist, I am bound by professional secrecy (privileged communication), which ensures that all shared information is treated with the highest level of confidentiality.

1. Personal Data we Process

We process your personal data because you use our services and/or because you provide this information to us yourself. This includes:

• Basic Information: First and last name, address, phone number, and email address.

• Intake Information: Information provided via intake forms (this includes sensitive data regarding your health and well-being).

• Payment Details: Invoicing information and transaction history via Stripe or PayPal (e.g., for international sessions).

• Digital Data: IP address and data regarding your activities on our website for the purpose of the booking module and international redirects.

2. Professional Secrecy and Security

Protecting your privacy is essential for a safe therapeutic environment:

• Professional Secrecy: All information shared during sessions or via forms is protected by professional secrecy. Data is never shared with third parties without your explicit written consent, unless required by a legal emergency or statutory obligation.

• Two-Factor Authentication (2FA): To guarantee the security of your data, we apply strict digital security measures. All systems storing client records, intake forms, or emails are secured with two-factor authentication (2FA).

3. Purpose and Retention Period

We process data for the performance of the agreement (therapeutic sessions), communication, invoicing, and to comply with Belgian accounting and healthcare legislation.

• Therapeutic Records: We adhere to the statutory retention periods for therapeutic files in Belgium (typically up to 30 years).

• Invoicing: 7 years according to fiscal guidelines.

4. Sharing with Third Parties

We do not sell your data. We only use necessary partners who are also GDPR compliant:

• Squarespace & Acuity Scheduling: For website management and the booking module.

• Google Workspace: For secure storage of email correspondence and client documentation.

• Payment Providers: Stripe or PayPal for processing transactions.

5. Online Dispute Resolution (ODR)

The European Commission provides a platform for Online Dispute Resolution (ODR), which allows consumers and traders to resolve disputes out-of-court. You can access the platform via the following link: https://ec.europa.eu/consumers/odr/.

In accordance with our commitment to transparency, please note that our primary contact email for any inquiries or disputes is the one listed on tochstudio.be.

6. Your Rights

You have the right to access, correct, or delete your personal data at any time. Requests can be directed to the contact information listed on tochstudio.be.