Last updated: 13 September 2026
This policy explains how personal data is processed when you use psy-help.ee and book a psychological consultation.
1. Data controller
The controller is Grin studio OÜ, registry code 12261817, address: Sojakooli 14-36, Tallinn, Estonia. For personal-data questions, contact info@psy-help.ee or +372 553 8455.
2. Data we process
- your first and last name;
- your email address and phone number, if supplied;
- the selected service, date, time and meeting format;
- a message or other information you choose to add;
- technical data such as IP address, request time and page, browser and device type, and cookie information.
The Team Booking form is only for arranging a meeting and does not ask for a diagnosis, symptoms or consultation content. Do not enter medical or other sensitive information there. If you need to share such information, first contact Nikita Grigoriev at info@psy-help.ee to agree on a suitable communication method.
3. Purposes and legal bases
- Booking, providing the consultation and service communications — performance of a contract or steps taken at your request before entering into a contract (Article 6(1)(b) GDPR).
- Invoices and accounting — compliance with a legal obligation (Article 6(1)(c) GDPR).
- Website security, prevention of misuse and protection of legal rights — the controller’s legitimate interests (Article 6(1)(f) GDPR).
- Optional analytics — consent where it is required and given through the cookie settings (Article 6(1)(a) GDPR).
- No more than one optional feedback request per email address, regardless of the number of consultations — the legitimate interest in improving the service (Article 6(1)(f) GDPR). You may object at any time; no such request will then be sent.
4. Booking, the website database and Google Calendar
Bookings are made through Team Booking. Booking details are stored in the website’s WordPress database by the hosting provider and transferred to Google Calendar to manage the schedule. They may include the date and time, selected service and contact details supplied with the booking. Google Meet may also be used for online consultations.
The supplied email address receives the confirmation, changes or cancellation notices, and practical information about the meeting, payment or online connection. After a completed consultation that has not been cancelled, the psychologist may separately choose to send one optional feedback request; this request is not sent automatically to every client. If a feedback request has already been sent to that address, it will not be sent again after later consultations. Responding is optional. You can opt out of these requests by contacting info@psy-help.ee.
An email address supplied for a booking is not used for advertising, newsletters or third-party promotions without separate consent. Contact details are not sold or shared for another party’s advertising.
5. Google and other technical services
Google processes information under its own terms and privacy policy. Google operates servers in different countries, so information may be processed outside the European Economic Area using applicable legal safeguards. See the Google Privacy Policy.
At the latest review, the website loaded Google Tag Manager, Google Analytics and Google Ads measurement tools through Google Site Kit, Google Maps, and the Metricool statistics tracker. For visitors in the European Economic Area, the Site Kit component denies analytics and advertising storage by default until a consent signal is received. Google Maps and Metricool may receive ordinary technical request data, including the IP address. The service list is reviewed when the website configuration changes.
6. Who may receive data
Access is limited to the controller and providers needed to operate the website and deliver the service:
- website hosting, technical maintenance and the WordPress database;
- email services;
- Google Calendar, Google Meet, Google Tag Manager, Google Analytics, Google Ads measurement tools, DoubleClick and Google Maps;
- Metricool for visitor statistics;
- banks and accounting providers to the extent needed for payments and reporting;
- website security providers.
Data is not sold. It is disclosed to public authorities only where there is a lawful basis.
7. Retention
Booking records, calendar events and service correspondence are kept while needed to arrange and provide the service, resolve questions and protect the parties’ legal rights. When those purposes no longer apply, the data is deleted or anonymised unless a longer period is required by law. Accounting records are kept for seven years under Estonian law. Technical logs are kept for the limited period needed for security and diagnostics. Feedback is kept only while needed to respond and improve the service.
To prevent a repeated feedback request, the website keeps a separate technical record: an HMAC hash of the normalised email address, together with the sending status and date. The original email address is not duplicated in this record. After a star is selected, the rating and a technical marker that the response for that booking has already been accepted are stored; the rating is also sent to info@psy-help.ee. These records are kept while the feedback mechanism remains in use or until an applicable erasure or objection request is fulfilled.
8. Your rights
Where provided by the GDPR, you may request access, correction, deletion, restriction or portability, object to processing based on legitimate interests, and withdraw consent. Contact info@psy-help.ee. A response is provided without undue delay and normally within one month.
If you believe your rights have been infringed, you may contact the Estonian Data Protection Inspectorate: www.aki.ee, info@aki.ee.
9. Automated decisions and policy changes
The website does not make decisions with legal or similarly significant effects based solely on automated processing. This policy may be updated when the website, services or legal requirements change; the latest revision date is shown on this page.