Privacy Policy

Last updated: July 18, 2026

1. Who is responsible for your data

Lysander Verschuur, MSc. (“we”, “us” or “the practice”) is the data controller responsible for the personal data processed through this website. For any privacy-related questions, you can reach us at contact@therapistlysander.com.

2. What data we collect

We only collect the information you choose to provide, namely:

Contact form: your name, email address, and the content of your message.

Appointment request: your name, email address, selected session type, preferred date and time, time zone, preferred language, and a brief description of your reason for seeking support.

If you become a client: additional personal data necessary for providing psychological care, such as intake information, treatment records, session notes, and other information relevant to your care. This may include special categories of personal data concerning your health, which are processed confidentially in accordance with the GDPR and applicable healthcare legislation.

Technical data: limited functional data required for the secure operation of the website (see the Cookies section).

3. Why we process your data (legal basis)

We process your data to respond to your message, to arrange appointments, and to provide careful and appropriate care. The legal bases are your consent, the performance of an agreement, and our legitimate interest in responding to your request. For health-related data, we rely on your explicit consent and on the basis of providing healthcare.

4. Cookies

This website uses functional (strictly necessary) cookies only: a session cookie and a security (CSRF) cookie that are required for the contact and booking forms to work safely and to remember your language preference.

We currently place no analytics, tracking or marketing cookies, and no third-party services such as Google Analytics are active. Strictly necessary cookies do not require a consent banner under the law. If any tracking is added in the future, this statement will be updated and consent will be requested.

5. How long we keep your data

We retain your personal data only for as long as necessary for the purposes for which it was collected or as required by law.

Healthcare records are retained in accordance with the statutory retention period under Dutch healthcare legislation (WGBO). In principle, medical records are retained for 20 years from the date of the last modification to the record, unless a longer retention period is required by law or is necessary in the interest of providing appropriate healthcare.

Personal data that is not subject to a statutory retention requirement is retained only for as long as necessary to provide our services or to comply with legal obligations.

6. Who we share data with

We never sell your data. We only share data with service providers that help us operate the website and practice, such as our hosting provider, email service, and calendar service (Google Calendar) for scheduling appointments. These parties process data solely on our instructions.

7. Your rights

You have the right to access, correct, delete or transfer your data, and to object to or restrict its processing. To exercise these rights, contact us at contact@therapistlysander.com. You also have the right to lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens).

8. Security

We take appropriate technical and organisational measures to protect your data against loss or unauthorised access, including a secure (encrypted) connection.

9. Changes to this statement

We may update this privacy policy from time to time. The most current version is always available on this page, with the date of the latest change shown at the top.

10. Contact

If you have any questions about this privacy policy or about how your data is processed, you are welcome to contact us at contact@therapistlysander.com.