Synapse Coaching

Privacy policy

How Synapse Coaching collects, uses, and protects your personal information, and the rights you have over it.

Last updated: 25.07.2026. This policy is reviewed at least once a year.

Who is responsible for your data

Synapse Coaching is an independent practice run by Angela Kondinska, based in Barcelona, Spain. For anything in this policy, or to exercise any of your rights, contact angela@kondinska.com.

Synapse Coaching is the data controller for the information described here. Some of that information is processed on my behalf by the service providers named below.

What I collect, and why

I collect only what the work needs:

  • Contact details — your name and email, so I can respond to enquiries and arrange sessions.
  • Booking and payment records — created when you book or pay for a session.
  • Intake and session information — for coaching clients, brief notes and any intake responses you provide, so the work can be effective and continuous.
  • Website usage data — if you consent to analytics cookies, basic information about how the site is used.

I do not collect more than I need, and I do not sell your data or share it for advertising.

Where your information is held

I use a small set of trusted providers to run the practice:

  • OfferingTree — website, bookings, and contact records.
  • Stripe — payment processing. I do not see or store your card details.
  • Proton — email and secure file storage.
  • Google Calendar — used only to schedule appointment times. No session content is stored there.
  • Session notes and intake forms — held securely in Proton Drive, which is end-to-end encrypted.

Each provider processes data under its own terms and applies its own security measures. Session notes and intake forms are never kept in loose documents or notebooks.

International transfers

Your most sensitive information, session notes and intake forms, is held in the EU in Proton Drive, and is not transferred outside it.

Some administrative information (your name, email, and booking details) is processed in the United States by the platforms that run the website and payments:

  • OfferingTree hosts the website and bookings and stores data in the United States. Its infrastructure providers, Amazon Web Services and Google Cloud, are certified under the EU-US Data Privacy Framework.
  • Stripe processes payments in the United States and is certified under the EU-US Data Privacy Framework.

I keep the information processed outside the EU to the minimum the practice needs, and no health or session content is stored there. For more detail about any transfer, contact angela@kondinska.com.

Cookies and analytics

When you first visit the site you are asked for your cookie preferences through our consent banner. Essential cookies are needed for the site to work. Analytics and marketing cookies are off by default and only run if you turn them on.

If you consent to analytics, the site uses Google Analytics 4 to understand which pages are useful and how visitors move around the site. This helps me improve the site. You can change or withdraw your cookie choices at any time through the banner.

Who can see your information

Only me. Nothing you share is passed to anyone else, except:

  • the service providers above, who process it on my behalf to run the practice;
  • where there is a serious risk of harm to you or someone else, or where disclosure is required by law;
  • with a clinical supervisor or mentor, where your case may be discussed anonymously to keep the work safe and high quality.

If your coaching is sponsored by an employer, they see only logistics and, if you agree, high-level goals. They never see the content of your sessions.

How long I keep it

  • Session notes and intake forms — kept for 2 years after our final session, then deleted.
  • Enquiries that do not become bookings — deleted after 12 months.
  • Invoices and financial records — kept for as long as Spanish tax law requires.

I review what is held once a year and delete anything past its retention period.

Your rights

Under the GDPR you have the right to access the personal data I hold about you, to have it corrected or deleted, to restrict or object to how it is used, and to receive a copy in a portable format. To exercise any of these, email angela@kondinska.com and I will respond within one month.

If you believe your data has been handled improperly, you have the right to complain to the Spanish data protection authority, the Agencia Española de Protección de Datos (AEPD), at www.aepd.es.

Consent

For coaching, you agree to the booking terms when you book, and consent is checked rather than assumed as the work continues. I ask before anything new, such as recording a session or using any material. For testimonials or case studies, I ask for explicit written consent, anonymise by default, and you can withdraw that consent later without giving a reason.

Changes to this policy

I review this policy at least once a year and whenever something material changes. The date at the top shows when it was last updated.