This Site is operated by Evangelia Florou Ganem, doing business as Eve Florou, a Psychotherapist and Clinical Counsellor based in Gold Coast, QLD, Australia.

Professional registration:

General enquiries: admin@eveflorou.com

Postal address available on request for legal notices.

​

Data Protection Contact: Eve Florou

Contact: admin@eveflorou.com

“Personal Information” / “Personal Data”  = any information that can identify an individual.
 

“Sensitive Information” / “Special Category Data” = health data, racial/ethnic origin, etc.

3.1 Identity & Contact Data: name, date of birth, postal address, email, phone.

3.2 Billing Data: invoice records, amounts owed/paid; limited payment-token data from Stripe (we do NOT see full card details).

3.3 Technical & Usage Data: IP address, device type, browser, page interactions, cookies.

3.4 Marketing Preferences: newsletter opt-in/opt-out choices.

3.5 Any other data you voluntarily provide (e.g., feedback forms).

4.1 Directly from you: when you fill in contact forms, appointment or referral forms, upload documents, or email us.

​

​4.2 From payment providers: details relating to transactions (e.g., name, email, order ID, amount) when you make a payment through our payment processor (Stripe/Wix Payments). We do not store full card details; those are processed and stored by the payment provider.

4.3. Automatically: via cookies and analytics (Google Analytics, Hotjar, etc.) for site performance and usage.

(A) To provide counselling / telehealth services and manage bookings.
– Legal bases: APP 3 (Australia); GDPR Art 6(1)(b) contract; Art 9(2)(h) health.
 

(B) To process payments & issue invoices.
– Legal bases: contract; legitimate interests (GDPR Art 6(1)(f)).
 

(C) To improve the Site, user experience and marketing effectiveness.
– Legal bases: legitimate interests; consent where cookies require it.
 

(D) To send service-related or marketing communications (opt-in only for marketing).
– Legal bases: consent; legitimate interests to keep clients informed.

We use data strictly for the purposes above, including scheduling sessions, providing telehealth, managing accounts, preventing fraud, improving services, and complying with regulations.

7.1 Service providers: We may share your information with trusted third‑party providers who help operate the site and deliver services (for example: hosting, email, backups, newsletter platforms, and analytics tools). These providers receive only the data they need to perform their service and are contractually required to protect it.

7.2 Payment processors: We do not process online payments at this time. If we start using a payment provider in the future (for example, Stripe or Wix Payments), transaction details—such as name, email, amount, and order ID—may be shared with that provider to complete the payment. We do not store full card numbers; those are held exclusively by the payment provider.

7.3 Legal compliance and security: We may disclose your data when required by law, a court order, or a valid request from authorities. We may also disclose information to protect our rights, safety, property, or to investigate fraud or other wrongdoing.

7.4 Business transfers: If the business is sold, merged, or reorganized (in whole or in part), your data may be transferred as part of that process. Any buyer will be required to maintain confidentiality and protect the data.

7.5 Aggregated or anonymized data: We may use and share aggregated or anonymized information that does not identify you personally for research, statistics, or marketing purposes.

7.6 Links and third‑party services: Our site may include links to third‑party websites or services. We are not responsible for their privacy practices—please review their privacy policies before sharing any information.

7.7 Your rights and contact: You can request access to, correction of, portability of, or deletion of your personal data, subject to legal limits. To exercise your rights or ask questions about how we share data, contact: admin@eveflorou.com.

​​

We may transfer or allow processing of website data by third‑party service providers located outside your country of residence (for example, hosting, analytics, newsletter platforms, or backup providers). Where required by law, we will obtain your consent or rely on another valid legal basis before transferring data.

We implement reasonable administrative, technical and physical measures to protect the personal data processed via this website. These measures are designed to reduce the risk of unauthorized access, loss, misuse, or disclosure while respecting the practicality and scale of a small website operation.

We keep personal data collected via the website only for as long as it is needed for the purposes described in this Privacy Policy, or as required by law. Retention times vary by the type of data and the reason for processing.

You have certain rights in relation to your personal data collected via this website. The availability and scope of these rights may vary depending on local law.

​

Common rights you may exercise:

• Right of access: request a copy of the personal data we hold about you.

• Right to rectification: ask us to correct inaccurate or incomplete data.

• Right to erasure (right to be forgotten): request deletion of your personal data where we have no legal reason to retain it.

• Right to restriction of processing: ask us to suspend processing while a dispute about accuracy or lawfulness is resolved.

• Right to data portability: request a machine‑readable copy of your data for transfer to another provider where technically feasible.

• Right to object: object to processing based on legitimate interests or direct marketing.

• Right to withdraw consent: where we process data based on your consent, you can withdraw that consent at any time (withdrawal does not affect prior lawful processing).

• Right to lodge a complaint with a supervisory authority: if you believe your rights have been violated, you may complain to the relevant regulator in your jurisdiction.

How to exercise your rights

• Contact: Send requests to admin@eveflorou.com. Include enough information for us to locate your data (name, email address used on the site) and specify the right you want to exercise.

• Verification: For your protection, we may request additional information to verify your identity before fulfilling requests.

• Response time: We aim to respond to valid requests promptly and, in any event, within the timeframes required by applicable law (commonly within one month). Complex requests may require a reasonable extension; we will notify you if that is necessary.

• Fees: We generally will not charge for handling rights requests. If a request is manifestly unfounded or excessive, we may charge a reasonable fee or refuse to act.

We use essential cookies for site functionality, and optional cookies (analytics, heat-maps) to improve UX. Non-essential cookies load only after consent via our cookie banner. You can disable cookies in your browser, but parts of the Site may not work.

We send newsletters only if you opt-in. You may unsubscribe at any time via the link in each email or by emailing admin@eveflorou.com

We may update this Policy periodically. The “Last updated” date will change accordingly. Material changes will be highlighted or emailed (if appropriate).

Questions, requests or privacy complaints:
Email: admin@eveflorou.com

If you are not satisfied with our response, you may lodge a complaint with your local Data Protection Authority.