Privacy Policy

Last updated: November 2026 · Español · Hrvatski

Who is responsible for your data

This website and my private practice are run by The Soul Academy, S.L. (CIF B02980472), trading as Nai Do Transpersonal Academy, Av. Miguel de Unamuno 29, 28806 Alcalá de Henares, Spain. For anything about your data, write to me at sanela@sanelacovic.com.

What I collect and why

When you book. Calendly collects your name, email, phone number, country and your answers to the booking questions, so we can meet at the right time and I can prepare. Sessions are paid either through the payment provider connected to Calendly or by bank transfer. I never see or store card details.

Before your first session. After booking you receive an intake form. It asks for your contact and invoicing details (including an ID or tax number, used only to issue a correct invoice), an emergency contact, and information about your health and what you are bringing, so I can tell you honestly whether this work is right for you now. Because this includes health information, I only collect it with your explicit consent.

During our work. Sessions take place on Zoom. I keep session notes, stored securely. Sessions are only recorded with your permission, which you give or decline in the intake form. Recordings are encrypted, only I have access to them, and they are never shared or published. Separately, you can choose whether anonymized material may be discussed in professional supervision, or used for research, case studies and book projects. Nothing based on your sessions is published without asking you again. Saying no to any of this does not affect our work, and you can change your mind at any time.

When you write to me. Messages you send by email or through the contact form are used only to reply to you. They are never added to a mailing list.

Newsletter. If you subscribe, I keep your email address until you unsubscribe. Every email has an unsubscribe link.

The "Where to Begin" guide

Your answers to the guide stay in your browser. The safety questions at the start are never sent anywhere.

If you book from your result, a short code comes with your booking: the approach the guide suggested and the numbers of the options you chose. It helps me prepare for our first conversation. Nothing else from the guide is sent.

I count visits to the guide anonymously with Umami, a privacy-friendly analytics tool. It does not use cookies and does not store your IP address. It only tells me things like how many people start the guide and reach a result, never who you are.

Cookies

This website is hosted by Squarespace, which uses cookies that are needed for the site to work and, with your consent, cookies for basic visitor statistics. I do not use advertising cookies on this site. You can control cookies through the banner and your browser settings.

Why I am allowed to use your data

I use your data to deliver the sessions you book (contract), with your explicit consent for health information and for the newsletter, for anonymous visitor statistics (legitimate interest), and where the law requires me to keep records (legal obligation).

Who helps me run the practice

I never sell or share your data for marketing. These services process data on my behalf, only to provide their service:

  • Squarespace: website hosting
  • Calendly and its payment provider: booking and payment
  • Jotform: intake, consent and contact forms
  • Zoom: online sessions
  • MailerLite: newsletter
  • Umami: anonymous visit counting for the guide

Some of these providers may process data outside the European Economic Area. Where they do, they are bound by the European Commission's Standard Contractual Clauses.

Confidentiality

What you share in our work is confidential. I only share it with your explicit written consent, unless the law requires it or there is an immediate risk of serious harm to you or someone else.

How long I keep your data

  • Intake form, session notes and invoices: 6 years after our last session
  • Session recordings (only if you agreed): 3 years after our last session, then kept unused on an encrypted drive until 6 years after it, then deleted. If you agreed to research and book use, up to 10 years
  • Booking details: as long as needed for the booking and for accounting
  • Messages: as long as needed to answer you
  • Newsletter: until you unsubscribe
  • Guide statistics: only as anonymous totals

Your rights

You can ask to see, correct, delete, restrict or receive a copy of your data, object to how I use it, and withdraw consent at any time. Write to sanela@sanelacovic.com and I will answer within 30 days. Some records must be kept for the legally required period. If you are not satisfied with my answer, you can contact the Spanish Data Protection Agency at aepd.es.

Under 18

My private sessions are for adults. I do not knowingly collect data from anyone under 18.

Changes

If this policy changes, I will update it here and change the date at the top.