This Privacy Policy explains how Christos Lefkides, Clinical Psychologist (“I,” “My,” “Me,” or “The Practice”) collects, uses, protects, and discloses personal information, particularly sensitive health data, when you use the website www.christoslefkides.com (the “Website”) and related online therapy services.
The entity responsible for the processing of your personal data is Christos Lefkides, Clinical Psychologist. You can contact me regarding any privacy concerns via email at contact@christoslefkides.com, or by mail at the practice address: Digeni Akrita 58-60, apt.201, “Ghinis” Building, P.C. 1061, Nicosia, Cyprus.
I collect two main categories of information. General Personal Data includes Contact Data (Name, email address, telephone number, mailing address) used to schedule appointments, communicate about services, and respond to inquiries. It also includes Technical Data (IP address, browser type, cookies, usage data via analytics) used to ensure the security and functioning of the Website. The legal basis for processing this data is Contractual Necessity (to provide the services you request) and Legitimate Interests (to secure and improve the Website).
The second category is Special Category Data (Sensitive Health Data), which includes information regarding your reasons for seeking therapy, symptoms, clinical notes, and treatment progress. This data is essential for the provision of professional psychotherapy and mental health services. The legal basis for processing this highly sensitive data is typically your Explicit Consent and is permitted under Article 9(2)(h) of the GDPR, as processing is necessary for the purposes of medical diagnosis and the provision of health care. For all data, processing may also occur based on a Legal Obligation for professional, legal, or ethical record-keeping requirements.
I treat your personal information with the utmost confidentiality. I will only disclose your personal data in limited, essential circumstances. This may include sharing with necessary Service Providers to facilitate online therapy (e.g., web hosting, payment processors) and through Therapy Platforms like Google Meets, Zoom, WhatsApp, or Viber. I take all reasonable steps to use platforms and settings that comply with GDPR security standards, but you should familiarize yourself with the privacy policies of these third-party communication tools. Crucially, I will only disclose data when required by law, or when I am ethically or legally mandated to break confidentiality (e.g., if there is an imminent threat of serious harm to yourself or others). I will never sell or rent your personal data to any third party. I implement appropriate security measures to protect your data from unauthorized access or alteration, using encryption and password protection for digital files. I will retain your personal data for as long as necessary to fulfill the purposes for which it was collected, and to satisfy any legal, accounting, or professional regulatory requirements in Cyprus.
Under data protection laws like the GDPR, you have several rights regarding your personal data. These include The Right to Be Informed (which this policy provides), The Right of Access (to request a copy of the data I hold), The Right to Rectification (to correct inaccurate data), The Right to Erasure (“Right to be Forgotten,” subject to professional record-keeping obligations), The Right to Restrict Processing, The Right to Object to Processing, The Right to Data Portability, and The Right to Withdraw Consent (where processing is based on consent). If you wish to exercise any of these rights, please contact me directly using the contact details provided above.
My website may use cookies for essential functioning and to distinguish you from other users. You can manage your browser settings to refuse cookies, but some parts of the Website may not function properly if you do. If you have any questions about this Policy or are dissatisfied with how your data has been handled, please contact me directly at contact@christoslefkides.com.c Furthermore, you have the right to lodge a formal complaint with the supervisory authority in Cyprus:
Commissioner for Personal Data Protection
I keep this Policy under regular review, and any changes will be posted on this page with a revised “Effective Date.”