Skip to content
MiraDos

Privacy policy

Last updated: 11 October 2026

MiraDos offers online psychological consultations. We know that what you tell us is personal, so this page explains in plain words what data we collect, why, and what you can do about it.

1. Who is responsible for your data

The controller of your personal data is MiraDos, the online psychological practice that runs this website, based in Warsaw, Poland ("MiraDos", "we"). Each psychologist who works with you also handles the information you share in a session, under their professional duty of confidentiality.

2. How to contact us about your data

Write to us at the email address on our Contact page, or use your account at any time. We answer data requests within one month.

3. What data we collect

  • When you book a session: your name, email address, phone number, your preferred messenger, your language and time zone, and the time you chose.
  • What would you like to talk about (optional): free text you choose to write. It is stored encrypted and is visible only to your psychologist. Administrators cannot read it.
  • Your account (if you create one): your email address and password (stored only in protected form) and your booking history.
  • Consents: which consent you gave, its version and language, and when you gave or withdrew it.
  • Technical data: a few strictly necessary cookies (see our Cookie policy), and security logs such as IP address and time of requests, kept to protect the site.
  • Messages to us: whatever you write to us by email or phone.

4. Why we use it and on what legal basis

  • To arrange and hold your consultation (booking, reminders, confirmations, calendar files, rescheduling): this is necessary to take steps at your request and to perform our agreement with you (Art. 6(1)(b) GDPR).
  • To keep the service secure and prevent abuse: our legitimate interest (Art. 6(1)(f) GDPR).
  • To meet legal obligations, for example accounting and tax records: Art. 6(1)(c) GDPR.
  • Optional analytics, if we use them: only with your consent (Art. 6(1)(a) GDPR). Nothing is measured until you agree.
  • Health-related information you share: only with your explicit consent (see section 5).

We do not sell your data and we do not use it for advertising.

5. Information that may relate to your health

What you write about why you want a consultation may reveal information about your health. This is special-category data. We ask for your separate, explicit consent before the booking is confirmed (Art. 9(2)(a) GDPR). The box is never ticked in advance. You can write nothing in that field and still book. You can withdraw your consent at any time in your account or by writing to us; withdrawal does not affect what was done before, and we may then be unable to prepare the session using that information.

If you are in immediate danger, call 112. This website does not provide emergency help.

6. Who we share data with

Only the people and services needed to run the practice:

  • the psychologist you booked with;
  • service providers that work for us under contract and only on our instructions: website hosting, email delivery (booking confirmations and reminders), and technical maintenance. We name the providers on request;
  • public authorities, when the law requires it.

We never give your details to other clients, advertisers or data brokers.

7. Transfers outside the European Economic Area

We aim to keep your data inside the EEA. If a provider processes data outside it, we rely on an adequacy decision or on standard contractual clauses approved by the European Commission.

8. How long we keep data

  • Booking and contact details: while we provide the service to you and for as long as needed for our legal and accounting obligations. In Poland, accounting records are generally kept for five years from the end of the year in which the transaction took place.
  • The optional "what would you like to talk about" text: deleted after 24 months.
  • Account: if you ask us to delete it, we remove it after a 14-day period in which you can change your mind, except what the law requires us to keep.
  • Access and security logs about opening client records: 12 months.
  • Consent records: for as long as needed to show that consent was given or withdrawn.

9. Your rights

You can ask us to: give you access to your data and a copy of it; correct it; delete it; restrict its use; hand it over in a portable format; and you can object to processing based on our legitimate interest. You can withdraw any consent at any time. Most of this you can do yourself in your account (export and deletion requests); otherwise write to us and we will reply within one month.

10. Your right to lodge a complaint

If you think we handle your data unlawfully, you can complain to the supervisory authority. In Poland this is the President of the Personal Data Protection Office (UODO), ul. Stawki 2, 00-193 Warsaw, uodo.gov.pl. You may also contact the authority in your own EU country.

11. Cookies

We use only the cookies the site needs, plus optional ones if you agree. Details are in our Cookie policy.

12. Changes to this policy

If we change how we handle data, we will update this page and the date at the top. For important changes we will tell you by email if you have an account.

Book a session