Privacy Policy

Last Updated: May 26, 2025

1. Introduction

We are SPEAK YOUR MIND KFT, a limited liability company incorporated under the laws of Hungary, Tax ID: 32522877-1-42. Our registered office is at 1082 Budapest, Leonardo da Vinci utca 7. Fsz. 2. ajtó, Hungary. Contact: info@speakyourmind.help

We operate the online platform at www.speakyourmind.help, which allows clients to book therapy sessions and provides information related to mental health.

This Privacy Policy describes how we collect, use, disclose, and protect personal data in accordance with the GDPR.

2. Definitions

Client — a person who uses the Website to book and attend sessions with therapists.
Therapist — an entrepreneur using the Website to connect with their clients.
Visitor — a user who browses the Website.

3. Legal Framework

Regulation (EU) 2016/679 (GDPR)
Hungarian Act CXII of 2011 on the Right to Informational Self-Determination and Freedom of Information ("Infotv.")

4. Personal Data We Process

We DO NOT sell your personal data.

We do not engage in automated individual decision-making as defined in Article 22 of the GDPR.

4.1 Clients

Contact details: name, phone number, email address
Billing and banking details
Booking system information: session dates, cancellations, communication
Feedback and evaluations of therapists
Employer information (if using as an employee benefit)

SPEAK YOUR MIND KFT does not have access to video conferencing with your therapist, nor do we receive sensitive health information. SPEAK YOUR MIND KFT does not have access to your credit card information — payments are processed by Stripe Payments Europe, Ltd.

4.2 Confidentiality Responsibility

All confidential information related to the content of therapeutic sessions is solely the responsibility of the therapists. The platform is not liable for the processing or storage of such information.

4.3 Data Processing Table for Clients

Legal basis	Purpose	Retention	Data
Contract (Art. 6(1)b GDPR)	Performance of contract	3 years after last login or at request	Contact, billing, booking, employer details
Legal obligation (Art. 6(1)c GDPR)	Compliance with legal obligations	10 years (tax law)	Contact, billing details
Legitimate interest (Art. 6(1)f GDPR)	Enforcing contractual claims	5 years from end of contract	Contact, billing, communication, feedback
Consent (Art. 6(1)a GDPR)	Direct marketing	3 years or until you unsubscribe	Contact details

5. Use of Cookies

For detailed information about the types of cookies we use, please refer to our Cookie Policy.

6. Data Sharing with Third Parties

We have entered into data processing agreements with all external service providers. Key partners include Google LLC (Google Meet), Stripe Payments Europe Ltd. (payments), DigitalOcean (hosting), Brevo (email), and Supabase (backend).

If your employer provides access to our platform, we do not share any of your personal data with them — only aggregated session counts.

7. How Do We Protect Your Personal Data?

High standards for therapists including confidentiality requirements
Technical safeguards: user verification, data anonymization, access restrictions, server security
Data minimization and strict confidentiality obligations

8. Data Breach Notification

In the event of a personal data breach, we will notify NAIH within 72 hours. If the breach poses high risk to your rights, you will also be informed.

9. Your Rights

Right to complain to the supervisory authority
Right to information about data we process
Right to rectification of inaccurate data
Right to erasure where no legal grounds exist for retention
Right to data portability in electronic form
Right to restriction of processing
Right to object to processing for direct marketing

This privacy policy is effective as of 05.26.2025.