​​At Perfectly Enough, your privacy is important. This Privacy Policy explains what personal information is collected, why it is collected, how it is used, and how it is protected when you use this website or work with me.

​

1. Information I Collect

Depending on how we work together, I may collect:

​

Basic Contact Details

- Name

- Email address

​

Invoicing Details (required by Spanish tax law)

- Home address

- Tax identification number (NIF/NIE or international equivalent)

​

These details are required to issue legally compliant invoices and maintain accounting records under Spanish autónomo regulations.

​

Service-Related Information

- Information you share when booking or during sessions

- Payment confirmations (e.g., Revolut, It’s Complicated)

​

Service Notes (Session Documentation)

To support continuity of care, I keep brief professional notes summarizing themes, goals, and tools used in sessions. These notes are stored securely in a private Google Drive folder accessible only to me and are not shared with third parties unless legally required.

Retention period: Notes are kept for up to 2 years after the last session, unless a shorter retention period is appropriate. They are then securely deleted.

​

Website

This website currently does not use cookies to collect personal data.
If this changes, this Privacy Policy will be updated before cookies are introduced.

​

2. Why I Collect Your Information (Legal Basis)

Under GDPR, your data is processed based on:

​

Contractual necessity

To provide counselling or coaching services, respond to enquiries, schedule sessions, or send resources.

Legal obligation

To issue legally valid invoices and comply with Spanish autónomo tax regulations.

Consent

For anything optional, such as receiving service updates or additional communication.

​

3. How I Use Your Information

Your data is used only for purposes directly related to our work together:

​

- Responding to enquiries

- Scheduling, confirming, and delivering sessions

- Issuing invoices and maintaining accounting records

- Providing resources, follow-up materials, or exercises

- Ensuring legal and professional compliance

​

I do not use your personal data for marketing unless you explicitly opt in.

​

4. Sharing Your Information

Your data stays private. I do not sell it, rent it, or share it unnecessarily.

I only share data in these situations:

​

1. With my certified Spanish accountant (gestor)

They handle invoicing and tax documentation on my behalf.
They are professionally bound by confidentiality and GDPR.

​

2. With the Spanish Tax Agency (Agencia Tributaria / Hacienda)

When legally required for autónomo tax reporting or audits.

​

3. With service providers I use to deliver sessions

(e.g., Google Meet, email, scheduling platforms)
These providers are GDPR-compliant and process data only on my behalf.

​

4. Service notes (session documentation)
Session notes are confidential and not shared with anyone, unless:

- you request this in writing, or

- I am legally required to disclose information in specific circumstances.

​

5. With your explicit written consent
If you ask that information be shared with another professional or third party, written permission is required.

​

Outside of these cases, your information goes nowhere.

​

5. How Your Information Is Stored

Your data is stored securely using GDPR-compliant tools. Access is limited to me and, when required, my gestor. I use appropriate technical and organizational measures to protect your data from unauthorized access, alteration, disclosure, or loss.

​

6. Data Retention

​

- Session notes: retained for up to 2 years after the last session.

- Administrative and invoicing data: retained for the period required by Spanish tax law (typically 5–7 years).

- General communication and service-related information: retained only as long as necessary to provide the service.

 

After these periods, data is securely deleted.

​

7. Your Rights (GDPR)

You have the right to:

- Access your personal data

- Correct inaccurate information

- Request deletion (unless the law requires retention, e.g., invoices)

- Object to certain types of processing

- Withdraw consent at any time

- Request data portability

​

To exercise any of these rights, contact me at: szabottimea@gmail.com

I will respond within the legally required timeframe.

​

8. Cookies

This website currently does not use cookies to collect personal data.
If this changes, the Privacy Policy will be updated before cookies are added.

​

9. Updates to This Policy

I may update this Privacy Policy from time to time to reflect legal changes or improvements in how I work. The latest version will always be available on this page.

​

10. Contact

If you have questions about how your data is handled, you can reach me at:
Email: szabottimea@gmail.com