Privacy Statement

At Rebalanced me with Mena, your privacy is important to me. This Privacy Statement explains how I collect, use, store, and protect your personal data when you visit my website or work with me, in accordance with the General Data Protection Regulation (GDPR).

1. Who I Am

Rebalanced me with Mena is a counselling and coaching practice focused on supporting individuals with their wellbeing and personal challenges.

The data controller for this site and my practice is Mena Eissa, operating in the Netherlands.

Data controller:
Mena Eissa, Rebalanced me with Mena
Email: mena.eissa@rebalanced.me
KvK: 95523847
BTW (VAT): NL005158192B60

I am responsible for the processing of personal data carried out by or on behalf of my practice.

2. What Personal Data I Collect

I may collect and store the following personal information:

  • Contact Details: Name, email address, phone number, and address (where relevant).

  • Booking Details: Dates and times of appointments.

  • Counselling & coaching Information

    • Notes from counselling and sessions.

    • Information you choose to share during sessions

    • Between-session communication, such as emails, messages or voice notes

    • Information about your circumstances, experiences, emotions, relationships, wellbeing and other personal matters that you choose to discuss

  • Payment Information: Invoices and payment records (no credit card details are stored).

I only collect and record personal data that is relevant and necessary for the purposes described in this Privacy Statement.

Some of the information you share during counselling may be health data or other special-category personal data under the GDPR. I only process this information where this is permitted under the GDPR and necessary for providing my services.

3. Why I Use Your Data

I use your personal data for the following purposes:

  • To provide counselling and coaching
    I use information you share with me to understand your situation, prepare for sessions, keep appropriate client records, and provide counselling or coaching. I process this information because it is needed to provide the service you have requested.

  • To communicate with you
    I use your contact details to respond to enquiries, arrange appointments, and communicate with you about your sessions and practical matters.

  • To manage payments and administration
    I use your payment and invoice information to manage payments and meet my legal and accounting obligations.

4. How I Protect Your Data

I take reasonable steps to keep your personal data secure and protect it from unauthorised access, loss, misuse or disclosure.

These measures include:

  • Encrypted storage of digital data where available

  • Password-protected systems

  • Access to personal information is restricted to me as the person responsible for the practice, and to service providers where necessary

  • Using appropriate security measures with the third-party services I use

Client-related records are backed up periodically on an encrypted external hard drive, stored securely and accessible only to me, to support data recovery in case of accidental loss or technical issues.

5. Sharing Your Data

  • I treat everything you share with me as confidential. I do not share your personal information with others unless you have given permission, sharing is necessary to provide a service you have requested, or I am legally required or permitted to do so.

  • In exceptional circumstances, information may need to be shared if there is a serious and immediate risk of harm to you or someone else.

6. Third-Party Service Providers

I use selected third-party services to operate my practice and website. Depending on the service involved, these may include:

  • Squarespace, for website hosting and website functionality

  • TidyCal, for appointment scheduling

  • Google services, including Google Drive, for storing and managing practice information

  • Email service providers, for communication

  • Accounting or invoicing services, where applicable

These providers may process personal data on my behalf or provide services that involve processing personal data. I only use such services where appropriate safeguards are in place.

Some of the services I use may process or store data outside the European Economic Area (EEA). Where this happens, I make sure the required GDPR safeguards are in place.

7. Use of Anonymized Insights

I may occasionally use fully anonymized insights from my work for learning, education, research, or publications. I will never use information that could identify you.

8. How Long I Keep Your Data

I do not keep personal data longer than necessary for the purpose for which it was collected, unless a longer period is required by law or is necessary for a legitimate legal or professional reason.

Different types of information may therefore have different retention periods.

  • Counselling and client records: I keep client records for 20 years where this retention period applies under the relevant legal or professional requirements.

  • Financial and tax records: retained for the period required under applicable Dutch tax law.

  • Enquiries and other correspondence: retained for as long as reasonably necessary to deal with the enquiry or relationship, taking into account any legal or professional obligations.

When personal data is no longer required, it is securely deleted or anonymised where appropriate.

9. Your Rights

I take reasonable steps to keep your personal data accurate and up to date. If your information is incomplete or has changed, you can ask me to update or supplement it.

Under the GDPR, you have the right to:

  • Access the personal data I hold about you.

  • Ask me to correct or update your personal data.

  • Ask me to delete your data where legally possible.

  • Ask me to restrict how I use your data in certain circumstances.

  • Receive your personal data in a portable format where applicable.

  • Object to certain uses of your data.

  • Withdraw your consent where I rely on consent to process your data.

Some of these rights may be limited where I am legally required to keep certain information.

You can exercise these rights by contacting me at mena.eissa@rebalanced.me. You may request access to your client file, ask for corrections or additions to incomplete or inaccurate information, or request the deletion of your personal data where legally permitted.

I will review and respond to your request in accordance with applicable data protection requirements. Please note that certain records may need to be retained where required by law or applicable professional obligations.

10. Complaints About Your Personal Data

If you have concerns about how I handle your personal data, I encourage you to contact me first so that I can try to resolve the matter.

You also have the right to lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens).

11. Data Protection Officer

I have not appointed a Data Protection Officer (DPO/FG), as I do not carry out large-scale processing of health data that requires one under the GDPR.

12. Cookies

This website uses cookies and similar technologies. Some are necessary for the website to function, while others may be used for analytics, performance or other purposes.

Non-essential cookies are only placed where the required consent has been obtained.

For more information about the cookies used on this website, please see the Cookie Statement.

13. Updates to this Statement

This Privacy Statement may be updated periodically to reflect changes in my practice, the way I handle personal data, or legal requirements.

Please check this page for the latest version.

14. Contact Information

If you have any questions about this Privacy Statement or how I process your personal data, please contact:

Mena Eissa
Rebalanced me with Mena
Email: mena.eissa@rebalanced.me
KvK: 95523847
BTW (VAT): NL005158192B60