Privacy Policy

Last updated: May 22, 2026

Who We Are

This website is operated by Ana Radisic, a licensed CBT and REBT psychotherapist practicing under the name Therapy Ana, based in Belgrade, Serbia. Website: therapyana.com

Ana Radisic is the data controller responsible for your personal data as described in this policy.

What Information We Collect

When you use this website or book a consultation, we may collect the following categories of personal data:

Contact & Identity Data

Your name, email address, and phone number submitted through contact or booking forms

Special Category (Sensitive) Health Data, collected via intake forms prior to your first session, including:

Medical and psychiatric history, current and past medications
Mental health history including previous therapy and hospitalizations
Trauma history and childhood experiences
Ethnicity (as part of the biographical intake form)
Current safety concerns including suicidal ideation

Technical Data

IP address, browser type, and pages visited — collected via cookies when you browse this website

Intake Forms & Clinical Data

Prior to your first session, you will be asked to complete an intake form:

Biographical Information Form for individual clients
Intake Form for couples therapy clients

These forms collect sensitive personal data classified as special category data under GDPR Article 9, including health history, medication use, trauma history, and mental health information. This data is processed solely to prepare for and deliver therapy services.

Completed intake forms are stored in encrypted systems with access restricted exclusively to Ana Radisic. No third party may access your intake form or clinical records without your explicit written consent.

For couples therapy clients: A “no-secrets policy” applies to information that materially affects the therapeutic relationship—meaning that in certain circumstances, information shared by one partner may be addressed with both partners present. This is explained in full before sessions begin. Each partner holds independent rights over their own personal data and may exercise those rights individually at any time.

How We Use Your Information

We use your personal data to:

Schedule and manage therapy sessions via our booking system
Send you the intake form and all session-related communications
Assess your needs and provide appropriate therapeutic support
Respond to inquiries you submit through the website
Fulfil our legal and professional obligations as a licensed therapist
Improve the performance and usability of this website

Confidentiality of Session Content

Everything discussed in therapy sessions is strictly confidential. Session notes and intake forms are never shared with third parties.

The only exceptions are the following:

A direct and credible risk to your safety or the safety of others, in which case relevant authorities or emergency services may be contacted
A legal obligation requiring disclosure under applicable law

Information related to suicidal ideation or physical safety concerns, collected via intake forms or disclosed in session, is used exclusively for therapeutic risk assessment and safety planning. It is never shared for any administrative, commercial, or non-clinical purpose.

As we serve clients across Europe, we process your personal data based on the following legal grounds:

Data Type	Legal Basis
Contact & booking data	Consent — Article 6(1)(a)
Sensitive health & clinical data	Health care provision — Article 9(2)(h)
Website technical data	Legitimate interest — Article 6(1)(f)
Legally required disclosures	Legal obligation — Article 6(1)(c)

By submitting an intake form, you provide explicit consent under GDPR Article 9 to the processing of sensitive personal data for the purpose of receiving therapy services.

Third-Party Service Providers (Data Sub-Processors)

We do not sell your personal data. Limited data is processed by the following trusted service providers solely to deliver our services:

Calendly (calendly.com) — used for session scheduling. Your name and email address are shared with Calendly for this purpose only. Calendly is a US-based company that operates under its own GDPR-compliant privacy notice and uses Standard Contractual Clauses (SCCs) to safeguard data transferred outside the EU/EEA. You can review Calendly’s privacy practices at calendly.com/legal/privacy-notice.
Email provider — used to send session-related communications. Emails in transit are protected by TLS encryption.

All service providers are bound by strict confidentiality obligations and are permitted to process your data only as necessary to deliver the agreed service.

Data Security

We take the security of your personal data seriously. Measures in place include:

Intake forms and clinical records are stored in encrypted systems
Access to client data is restricted exclusively to Ana Radisic
Email communications are encrypted in transit using TLS
Devices used to access client data are password-protected

In the unlikely event of a personal data breach that poses a risk to your rights and freedoms, you will be notified without undue delay in accordance with GDPR Article 33.

Cookies

This website uses cookies in two categories:

Essential cookies required for the website to function correctly (e.g., session management, booking widget). These do not require consent.
Analytics cookies used to understand how visitors use the site (e.g., pages visited, traffic sources). These are only activated with your prior consent.

You can manage or withdraw your cookie preferences at any time via the cookie banner on this website or through your browser settings. Disabling certain cookies may affect website functionality.

Data Retention

Client records, including intake forms and session notes, are retained for a minimum of 5 years following the last session, in accordance with Serbian professional standards and applicable data protection law. After this period, records are securely and permanently deleted.

Technical data collected via cookies is retained for no longer than 12 months.

You have the following rights regarding your personal data:

Access: request a copy of the personal data we hold about you
Correction: request that inaccurate or incomplete data be corrected
Deletion: request that your data be erased, where no legal obligation requires its retention
Portability: receive your data in a structured, machine-readable format
Restriction: request that processing be limited while a concern is being resolved
Withdraw consent: at any time, without affecting the lawfulness of prior processing
Lodge a complaint with the Commissioner for Information of Public Importance and Personal Data Protection (Serbia) or the relevant supervisory authority in your country of residence

To exercise any of these rights, please contact us using the details below. We will respond within 30 days.

Contact

For any privacy-related questions, requests, or concerns, please contact:

Ana Radisic, Therapy Ana
ana@therapyana.com
therapyana.com

This privacy policy was last reviewed and updated on May 22, 2026. We reserve the right to update this policy periodically. Any material changes will be communicated via the website.