Privacy Policy
Last updated: July 2026
This policy explains what personal data this website collects, how it is used, and what rights you have. It is intended to comply with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, and — where relevant to clients based in Switzerland — the Swiss Federal Act on Data Protection (FADP).
1. Who Is Responsible
Dr. med. Riza Arapi is the data controller for personal data collected through this website. See the Legal Notice for contact details.
2. What Data Is Collected
| Data | When collected | Purpose |
|---|---|---|
| Name, email address | When you submit the contact form | To respond to your enquiry |
| Enquiry type (individual / organisation / other) | When you submit the contact form | To route and respond to your enquiry appropriately |
| Message content | When you submit the contact form | To understand and respond to your enquiry |
3. Cookies and Analytics
This website uses Google Analytics (GA4) to understand how visitors use the site — for example, how many people visit, which pages they view, how long they stay, and roughly where they are visiting from (country/city level, derived from IP address). Google Analytics uses cookies and similar technologies to do this.
Data collected by Google Analytics may include: your approximate location, device and browser type, pages viewed, time spent on the site, and how you arrived at the site (e.g. via a search engine or social media). This data is processed by Google on our behalf, in accordance with Google's own privacy policy, and may be transferred to and processed in the United States or other countries where Google operates, under Google's standard safeguards for international data transfers.
You can opt out of Google Analytics tracking at any time by installing the Google Analytics Opt-out Browser Add-on, or by using your browser's private/incognito mode or cookie-blocking settings.
4. How the Contact Form Works
Enquiries submitted through this website are processed using a third-party form-delivery service (FormSubmit), which forwards your message directly to the Practitioner's private email address. This website does not store your message on its own server or database; the submission is transmitted directly to the Practitioner's inbox.
5. Legal Basis for Processing
Personal data submitted via the contact form is processed on the basis of legitimate interest (responding to enquiries about the Services) and, where a consultation is booked, on the basis of taking steps prior to entering into a contract.
6. Data Retention
Enquiry and correspondence data is retained only for as long as necessary to respond to your enquiry or, where a consultation or programme is booked, for the duration of that advisory relationship and any applicable record-keeping period thereafter. Data no longer needed is deleted or anonymised. As the services offered are advisory and educational rather than clinical, no medical or psychiatric records are created or retained through this website.
7. Data Sharing
Personal data is not sold or shared with third parties for marketing purposes. Data may be shared with: (a) the form-delivery service used to transmit enquiries (FormSubmit); and (b) professional or legal advisors, where necessary, or as required by law.
8. International Transfers
Given consultations are offered across the UK, Switzerland, and Austria, personal data may be processed in different jurisdictions. Appropriate safeguards are used where data is transferred outside the UK or Switzerland, in line with applicable data protection law.
9. Your Rights
Depending on your location, you may have the right to:
- Request access to the personal data held about you
- Request correction of inaccurate data
- Request deletion of your data, where applicable
- Object to or restrict certain processing
- Request a copy of your data in a portable format
- Lodge a complaint with a supervisory authority (in the UK, the Information Commissioner's Office — ico.org.uk)
To exercise any of these rights, please get in touch via the contact form on the homepage.
10. Children's Privacy
This website and its Services are intended for adults. Personal data from individuals under 18 is not knowingly collected.
11. Changes to This Policy
This policy may be updated from time to time to reflect changes in practice or legal requirements. The date at the top of this page indicates when it was last revised.
12. Contact
Questions about this policy or how your data is handled can be raised via the contact form on the homepage.