Last updated: September 30, 2026
Your privacy matters, especially when you are considering therapy. This Privacy Policy explains what personal information is collected through drgalyaatanasova.com, why it is collected, how it is used and protected, and what rights you have. It applies to visitors from the United States, the European Union (including Bulgaria) and anywhere else.
1. Who is responsible for your data
The data controller for this website is Dr. Galya Atanasova, PsyD, licensed clinical psychologist. For any privacy question or request, contact: galya.atanasovadr@gmail.com.
2. Information we collect
- Contact and appointment forms: your name, email address, and, if you choose to provide them, a preferred date and time and the content of your message.
- Emails you send directly: your email address and anything you choose to include.
- Technical information: like any website, the server processes your IP address and basic browser information to deliver pages and protect the site from abuse. Your IP address is also used, without being stored, to determine your country so that the correct fee information is shown.
This website does not use advertising, analytics or tracking cookies, and it does not sell or rent personal information to anyone.
3. Please do not send clinical information through the website
The contact forms and regular email are meant for scheduling and general questions only. They are not a secure channel for sharing detailed health or clinical information. Please keep your first message brief; personal and clinical details can be discussed safely during your consultation.
Once you become a client, your therapy records are handled separately under professional confidentiality rules and applicable health privacy laws, such as HIPAA in the United States and the GDPR in the European Union. You will receive a separate notice of privacy practices and informed consent before treatment begins.
4. How we use your information
- To reply to your message and arrange a consultation or session.
- To keep the website secure, prevent spam and fix technical problems.
- To show content that is relevant to your location, such as fee information.
For visitors in the European Union, the legal bases for this processing are taking steps at your request before a possible agreement (Art. 6(1)(b) GDPR) and legitimate interests in running a secure website (Art. 6(1)(f) GDPR).
5. Who can access your information
Messages are accessed only by Dr. Atanasova. To operate the website, limited technical providers may process data on our behalf, such as the web hosting provider and the email service used to deliver form notifications. They may only use the data to provide their service. Information may be disclosed if required by law.
Some of these providers may be located outside your country. Where data is transferred outside the European Economic Area, appropriate safeguards such as Standard Contractual Clauses are relied upon.
6. How long we keep your information
Form submissions and emails that do not lead to therapy are kept for no longer than 12 months and then deleted. If you become a client, records are kept for the period required by professional and legal obligations.
7. Your rights
Depending on where you live, you may have the right to access the personal information we hold about you, to correct or delete it, to restrict or object to its processing, and to receive it in a portable format. Residents of the European Union may also lodge a complaint with a data protection authority; in Bulgaria this is the Commission for Personal Data Protection (www.cpdp.bg). California residents have similar rights under the California Consumer Privacy Act.
To exercise any of these rights, email galya.atanasovadr@gmail.com. We will respond within 30 days.
8. Security
The website uses an encrypted HTTPS connection, spam protection and restricted administrative access. No method of transmission over the internet is completely secure, which is why sensitive information should be shared only during sessions.
9. Children
This website and its services are intended for adults. We do not knowingly collect personal information from anyone under 18 through this website.
10. Changes to this policy
This policy may be updated from time to time. The date at the top of this page shows when it was last changed.
