Legal document
Privacy Policy
Last Updated: September 3, 2026
At Intronaut Praxis, your privacy and confidentiality are our highest priorities. This Privacy Policy explains how we collect, use, protect, and handle your personal information in line with applicable data protection law in Bosnia and Herzegovina and with the principles of the EU General Data Protection Regulation (GDPR). The rights described in Section 6 are offered to every visitor, wherever you are.
1. Information We Collect
1.1 Personal Information
When you send a session request or contact us through our website, we collect:
- Name or preferred alias
- Email address
- Phone number
- Preferred contact method (email, SMS, WhatsApp or Viber)
- Which service you are asking about
- Preferred days and times of day
- Whether you prefer online or in-person sessions
- How soon you would like to begin
- Any optional notes you choose to add
- A record of the consents you gave when submitting
- Messages sent through our contact form
1.2 Clinical Information
During therapy sessions, we collect and maintain clinical notes and records as required by professional standards and legal obligations. This information is kept separately from website data and is subject to strict therapeutic confidentiality.
Clinical notes begin at your first session. Anything you write into a form on this website — including the optional notes field — is handled as website data rather than as a clinical record, and is stored with our form provider (see Section 3). Please keep website messages brief; there is room for detail in session.
1.3 Technical Information
We may automatically collect:
- IP address
- Browser type and version
- Device information
- Pages visited and time spent on pages
This information is collected by Google Analytics (see Section 3.3).
2. How We Use Your Information
We use your personal information for the following purposes:
- Providing Services: To schedule appointments, conduct therapy sessions, and provide professional psychological services
- Communication: To respond to inquiries, send appointment reminders, and provide necessary service-related information
- Legal Obligations: To comply with professional regulations, legal requirements, and ethical guidelines
- Website Analytics: To understand how the website is used — which pages are read and where visitors leave — so that it can be improved
- Website Improvement: To improve our website functionality and user experience
3. Third-Party Services
3.1 Netlify
Our website is hosted by Netlify, which also receives and stores session requests sent through the form. Submissions are stored on Netlify's servers and emailed to us. Netlify processes data in the United States.
3.2 Formspree
The shorter contact form uses Formspree to deliver messages to us. Formspree processes data in the United States.
3.3 Google Analytics
We use Google Analytics to understand how the website is used. It sets cookies in your browser (see Section 7) and collects the technical information listed in Section 1.3. We do not send it your name, email address, phone number, or any free-text you write. It does receive which service you selected and your preferred contact method, so that we can see which parts of the site lead to enquiries. You can opt out through your browser settings or by installing Google's opt-out browser add-on.
3.4 Google Fonts
We use Google Fonts to display fonts on our website. This may result in a connection to Google servers. Google's privacy policy applies to this service.
4. Therapeutic Confidentiality
As a licensed psychotherapist, I am bound by strict confidentiality requirements. Everything you share during therapy sessions is confidential, except in the following rare situations:
- Risk of serious harm to yourself or others
- Suspected abuse or neglect of a child, elderly person, or vulnerable adult
- Court order or legal requirement
- With your explicit written consent
Any disclosure in these situations will be limited to the minimum necessary and will be discussed with you whenever possible.
5. Data Storage and Security
We implement appropriate technical and organizational measures to protect your personal information:
- Encrypted connections (HTTPS/SSL)
- Secure data storage with access controls
- Regular security assessments
- Clinical records stored separately from website and form data
- Limited access to personal information (only authorized personnel)
6. Your Rights (GDPR)
Under GDPR and other privacy laws, you have the following rights:
- Right to Access: Request a copy of your personal information
- Right to Rectification: Request correction of inaccurate information
- Right to Erasure: Request deletion of your personal information (subject to legal and professional obligations)
- Right to Restrict Processing: Request limitation of how we use your information
- Right to Data Portability: Request transfer of your information to another service provider
- Right to Object: Object to certain types of processing
- Right to Withdraw Consent: Withdraw consent at any time where we rely on consent
7. Cookies
Our website uses a small number of cookies:
- Analytics Cookies: Google Analytics sets cookies named
_gaand_ga_4XMHTF11S9. They let us count visits and recognise returning visitors, and they expire after two years. - No Advertising Cookies: We do not use cookies for advertising, and we do not sell or share your data with advertisers.
You can block or delete cookies through your browser settings, or install Google's opt-out browser add-on. The website works normally without them.
8. International Data Transfers
Your personal information is primarily processed and stored in Bosnia and Herzegovina. When using third-party services (Netlify, Formspree, Google), your data may be transferred to and processed in other countries, including the United States. We ensure such transfers comply with applicable data protection laws.
9. Children's Privacy
This practice works exclusively with adults. Therapeutic work with children is a distinct field for which I am not qualified, and our services are not directed to anyone under 18. If you are contacting us about someone under 18, we will refer you to a colleague who specialises in that work.
10. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new policy on this page and updating the "Last Updated" date. Continued use of our services after changes constitutes acceptance of the updated policy.
11. Contact Information
If you have questions about this Privacy Policy or wish to exercise your rights, please contact us:
Data Controller: Emir Nalo, Intronaut Praxis
Address: Trg Sarajevske Olimpijade 6, 71000 Sarajevo, Bosnia and Herzegovina
Email: intronaut.praxis@gmail.com
12. Supervisory Authority
If you believe your data protection rights have been violated, you have the right to lodge a complaint with your local data protection supervisory authority.