Privacy Policy

Last updated: October 7th, 2026

This Privacy Policy explains how Vútuka House, through its psychotherapy practice operated by Yema Ferreira, collects, uses, stores and protects personal information when you visit yemaferreira.com, contact me, book a consultation, or communicate with me as a prospective client.

Vútuka House is the legal entity through which Yema Ferreira Psychotherapy operates.

1. Who is responsible for your personal data?

The data controller responsible for the processing described in this Privacy Policy is:

Vútuka House
Nansensgade 47, st. th
1366 København K
Denmark
CVR: 40396039

You can contact me regarding privacy and personal-data matters at:

contact@yemaferreira.com

You may also contact Vútuka House at:

connect@vutukahouse.com

2. What personal information do I collect?

The information I collect depends on how you interact with me.

When you visit the website

Depending on your settings and how you use the website, information may be collected through cookies and analytics technologies, including information such as:

  • IP address;

  • browser and device information;

  • pages visited;

  • approximate location derived from technical information;

  • how you interact with the website; and

  • information about how you arrived at the website.

I use Google Analytics to understand how the website is being used and to improve it.

When you book a consultation

When you book a free 30-minute consultation, I collect:

  • your name;

  • email address; and

  • telephone number.

Your booking is made through my booking system, which is provided through GoHighLevel/FEA Create.

You receive an automated confirmation email containing the Zoom link for your consultation and may receive reminder emails before the appointment. You can use the links in these emails to cancel or reschedule your consultation.

When you contact me

If you contact me by email, telephone, SMS, WhatsApp or another communication channel, I may process the information you provide, including your contact details and the content of our communication.

Because you are contacting a psychotherapist, you may choose to share information about your mental health, personal circumstances, relationships, experiences or other sensitive matters. Such information may constitute special-category personal data, including health information, under the GDPR.

Please therefore avoid sending highly sensitive or extensive personal information by ordinary email unless it is necessary for your communication with me.

During a consultation

The purpose of the consultation is to discuss what you are looking for, answer questions, and determine whether working together may be appropriate.

The consultation is confidential.

The consultation is not recorded.

During or following the consultation, I may make formal clinical notes. These notes may contain sensitive personal information, including information concerning your health or personal circumstances.

3. Why do I process your information?

I process personal information for purposes including:

  • responding to enquiries;

  • arranging and administering consultations;

  • communicating with you about your consultation;

  • conducting the consultation;

  • assessing whether psychotherapy with me may be an appropriate service for you;

  • maintaining appropriate professional records;

  • communicating with you if you decide to begin therapy;

  • complying with legal and professional obligations;

  • protecting my legitimate rights and interests where appropriate; and

  • maintaining the security and functioning of my website and systems.

I do not automatically add people who book consultations to my newsletter or other marketing lists.

If you wish to receive my newsletter or other marketing communications, you must actively subscribe through the relevant sign-up process.

4. Sensitive personal information

Information concerning mental or physical health is considered a special category of personal data under the GDPR and receives additional protection.

I only process such information when there is an appropriate legal basis for doing so under the GDPR and applicable Danish law.

Where appropriate, I may ask for your explicit consent to the processing of sensitive information for a specific purpose.

Your personal information is not sold or rented to third parties.

5. Confidentiality

Information shared with me in the context of a psychotherapy consultation is treated as confidential.

Confidentiality is separate from, but works alongside, your rights under data-protection law.

There may be circumstances in which confidentiality cannot be maintained, for example where disclosure is required by law or where a legally recognised exception to confidentiality applies. Any relevant limitations to confidentiality will be explained as appropriate.

6. How your information is stored

Different types of information are stored in different ways.

Electronic communications

Emails and correspondence with prospective clients are stored in the relevant email systems used by Vútuka House/Yema Ferreira Psychotherapy, including Microsoft 365 and the Health Hosts email environment.

Booking information

Consultation booking information and automated booking-related communications are handled through GoHighLevel/FEA Create.

Clinical notes

Formal clinical notes are maintained in physical files and stored in a locked cabinet with restricted access.

The consultation itself is not recorded.

7. How long is your information kept?

I retain personal information only for as long as it is necessary for the purpose for which it was collected, unless a longer period is required or justified by applicable law, professional obligations, or the establishment, exercise or defence of legal claims.

Formal clinical notes relating to consultations are currently retained for five years and are stored securely.

This retention practice is intended to support appropriate professional record-keeping and accountability. The applicable retention period may be reviewed if relevant professional or legal requirements change.

Other information, such as booking and correspondence records, may be retained for different periods depending on their purpose and any applicable legal or professional requirements.

When information is no longer required, it will be securely deleted or destroyed.

8. Who has access to your information?

Your personal information is primarily accessed by me.

I also use selected service providers to operate the website, booking system, communications and other business functions. Depending on the service involved, these providers may process personal information on my behalf or may process information under their own responsibilities.

These services currently include:

  • GoHighLevel / FEA Create — consultation booking and automated booking-related emails;

  • Zoom — online consultations;

  • Microsoft 365 — business email;

  • Health Hosts — email services for contact@yemaferreira.com;

  • Google Analytics — website analytics;

  • Stripe — payments;

  • MobilePay — payments;

  • Billy/Meneto — invoicing and accounting.

Where a provider processes personal data on my behalf, I take appropriate steps to ensure that the relevant data-protection requirements and contractual safeguards are in place.

Some service providers may process information outside Denmark or the European Economic Area. Where this occurs, the relevant legal safeguards required under data-protection law will apply.

9. Payments and invoicing

Payment and invoicing information is generally relevant once you become a therapy client rather than during the initial consultation process.

For therapy clients, I use Billy/Meneto, Stripe and MobilePay as applicable.

I do not receive or store your complete payment-card details myself when payment is processed through a third-party payment provider.

10. Marketing

I do not use the information you provide when booking a consultation to automatically subscribe you to my newsletter or marketing communications.

If you choose to subscribe to my newsletter or another mailing list, your contact information will be processed for that purpose in accordance with the information provided when you subscribe.

You can withdraw your marketing consent at any time by using the unsubscribe option in the relevant communication or by contacting me.

11. Your rights

Under the GDPR, you have a number of rights concerning your personal information.

Depending on the circumstances, these include the right to:

  • request access to the personal information I hold about you;

  • request correction of inaccurate information;

  • request deletion of your information;

  • request restriction of processing;

  • object to certain processing;

  • request data portability where applicable; and

  • withdraw consent where processing is based on consent.

These rights are subject to certain exceptions and limitations under applicable law. For example, information may sometimes need to be retained despite a request for deletion where there is a legal or other valid basis for retaining it.

If you wish to exercise your rights, contact:

contact@yemaferreira.com

I will respond within the timeframe required by applicable data-protection law.

12. Cookies

The website uses cookies and similar technologies.

Some cookies are necessary for the website to function, while others may be used for analytics and to understand how visitors use the website.

Where required, your consent will be requested before non-essential cookies are placed on your device.

You can also manage cookies through your browser settings.

13. Data security

I take appropriate technical and organisational measures to protect personal information against unauthorised access, loss, destruction, alteration or disclosure.

Because no method of transmitting or storing information electronically can be guaranteed to be completely secure, I cannot guarantee absolute security.

14. Data breaches

If a personal-data breach occurs, I will assess it and take the steps required under applicable data-protection law, including notifying the Danish Data Protection Agency where legally required.

15. Complaints

If you have concerns about how your personal information is being handled, I encourage you to contact me first so that I have an opportunity to address your concern.

You also have the right to lodge a complaint with the Danish Data Protection Agency (Datatilsynet), which is the supervisory authority for data protection in Denmark.

16. Changes to this Privacy Policy

I may update this Privacy Policy from time to time to reflect changes in my services, technology, legal requirements or data-processing practices.

The current version will always be available on yemaferreira.com.

Vútuka House
Nansensgade 47, st. th
1366 København K
Denmark
CVR 40396039

Yema ferreira psychotherapy

© Copyright 2026 Yema Ferreira | Privacy Policy | Terms & Conditions