Privacy policy

Last updated: June, 2026

This Privacy Policy describes how Trang Psychology (“I”, “the Practice”) collects, uses, and protects your personal data. My practice is located in the Netherlands and complies with the General Data Protection Regulation (GDPR) and the Dutch Medical Treatment Contracts Act (WGBO).

1. Identity and Contact Details

Data Controller: Trang Duong
Location: Utrecht, The Netherlands
Email: duong@trangpsychology.com
Website: www.trangpsychology.com

2. What Personal Data I Collect

Depending on our interaction (enquiry, consultation, or ongoing counseling), I may process:

Identity Data: Name, date of birth.
Contact Data: Email address, phone number.
Health Data (Special Category): Psychological history, therapy notes, assessments, treatment plans.
Financial Data: Billing information and payment history.
Technical Data: IP address and cookies (if you visit my website).

3. Why I Process Your Data (Legal Basis)

Under the GDPR, I process your data based on:

Provision of Services: To provide psychological counseling and consulting services.
Contractual Necessity: To fulfill my agreement with you (e.g., scheduling, communication, and billing).
Legitimate Interest: To maintain a professional record of our sessions to ensure the quality and continuity of the counseling provided.
Consent: When you explicitly agree to share information with third parties (e.g., a family member or another professional).

4. Confidentiality & Data Sharing

Your privacy is a core pillar of my practice. I do not sell your data. Information is shared only under the following circumstances:

Virtual Sessions: I use secure, GDPR-compliant platforms for sessions.
Professional Secrecy: All conversations are confidential. This secrecy is only breached if:
- There is a serious and immediate risk of harm to yourself or others.
- There is a legal obligation (e.g., a court order).
Administrative Services: I may use secure third-party tools for invoicing or encrypted data storage.

5. International Data Transfers

As I provide virtual services to clients from other non-EU countries, your data may be accessed from outside the European Economic Area (EEA). I ensure that all digital tools used maintain high-level encryption and comply with EU data protection standards.

6. Data Retention

I retain your personal data and counseling notes only for as long as is necessary to fulfill the purposes for which they were collected.

Counseling Records: I typically retain counseling files for 7 years after the conclusion of our services to ensure continuity should you return to counseling.
Administrative & Financial Records: These are retained for 7 years to comply with Dutch tax law (Belastingdienst) requirements.
Deletion: Once the retention period has expired, your data will be securely deleted or anonymized.

7. Your Rights

You have the following rights regarding your data:

Right to Access: You may request a copy of your clinical file.
Right to Rectification: You may ask to correct inaccurate data.
Right to Erasure: You may request deletion of data
Right to Withdraw Consent: You can withdraw consent for processing at any time, though this may mean I can no longer provide services to you.

8. Security

I implement strict technical and organizational measures to protect your data, including:

Use of encrypted communication channels.
Secure, password-protected/encrypted storage for session notes.
Regular updates to security protocols.

9. Complaints

If you have a concern about how I handle your data, please contact me first. You also have the right to lodge a complaint with the Dutch Data Protection Authority:

Autoriteit Persoonsgegevens

PO Box 93374 2509 AJ DEN HAAG

The Netherlands

Contact information:

If you would like to contact me to understand more about this Policy or wish to contact me concerning any matter relating to individual rights and your Personal Information, you may send an email to duong@trangpsychology.con.