Last updated: October 20, 2026

Privacy Policy

Website: www.alisoufizadeh.com

This Privacy Policy explains how personal data is handled when you visit www.alisoufizadeh.com (the "Website") or contact me by email after finding my details on it. It is written in line with the EU General Data Protection Regulation ("GDPR") and Hungarian Act CXII of 2011 on the Right of Informational Self-Determination and on Freedom of Information ("Infotv.").

This policy covers the Website only. If you go on to book psychological consultations with me, you will receive a separate Client Privacy Notice explaining how I handle client information.

1. Who is responsible for your data

The data controller is:

Alimohammad (Ali) Soufizadeh, Email: alimsoufizadeh@pm.me

I have not appointed a Data Protection Officer, as this is not required for the processing described here. For any question about this policy or your data, please write to the email address above.

2. In short

  • The Website has no contact forms, user accounts, online shop, booking system or newsletter.

  • I do not ask you to enter any personal information on the Website.

  • My hosting provider, Squarespace, automatically collects some technical information about visits, and provides me with basic visitor statistics if you accept analytics cookies.

  • If you decide to email me, I receive whatever you choose to include in your email.

  • I do not sell your data or use it for advertising.

3. What data is processed, why, and on what legal basis

3.1 Visiting the Website

Data: When you visit the Website, the following technical information is collected automatically: your IP address; information about your browser, device and network; the page you came from; the pages you view; and the date and time of your visit.

Purpose and legal basis:

  • To deliver the Website securely and keep it working. Squarespace uses strictly necessary cookies and server logs for this. The legal basis is my legitimate interest in operating a secure, functioning website (Art. 6(1)(f) GDPR). Strictly necessary cookies do not require your consent under Hungarian electronic communications law.

  • To understand how the Website is used (analytics). If you accept analytics cookies on the cookie banner, Squarespace also records how you use the Website, such as clicks, internal links followed, pages visited, scrolling, searches and timestamps. I only see this as aggregated statistics in my Squarespace dashboard and do not use it to identify individual visitors. The legal basis is your consent (Art. 6(1)(a) GDPR). You can refuse analytics cookies, or withdraw your consent at any time through the cookie settings on the Website; withdrawal does not affect processing that took place before it.

Details of the individual cookies Squarespace places, and how long they last, are listed on Squarespace's page The cookies Squarespace uses.

3.2 Fonts

To display the Website correctly, font files are loaded from Google Fonts and Adobe Fonts. When this happens, these providers may receive your IP address, information about your browser and device, and the page you are viewing. The legal basis is my legitimate interest in presenting the Website consistently and legibly (Art. 6(1)(f) GDPR).

3.3 Contacting me by email

The Website displays my email address. If you write to me:

Data: your email address, your name (if given), the content of your message and any attachments, and standard email metadata (such as the date and time sent).

Purpose: to read and reply to your message and, if you wish, to arrange an initial consultation.

Legal basis: where you are enquiring about my services, processing is necessary to take steps at your request before entering into a contract (Art. 6(1)(b) GDPR). For other enquiries, the legal basis is my legitimate interest in responding to messages I receive (Art. 6(1)(f) GDPR).

Sensitive information: You do not need to share details about your health, personal history or other sensitive matters in a first email; a short note about what you are looking for is enough, and we can discuss the rest in person. If you choose to include such information, I use it only to respond to you appropriately, and I rely on your explicit consent (Art. 9(2)(a) GDPR), which you may withdraw at any time by asking me to delete it.

Security of email: My email is provided by Proton, which stores messages in encrypted form. Please be aware that emails sent from other providers are not necessarily end-to-end encrypted while in transit.

Retention: If our correspondence does not lead to consultations, I delete it within 12 months of our last contact. If you become a client, the relevant correspondence becomes part of your client records and is handled as described in my Client Privacy Notice.

4. Who receives your data

I share personal data only with the service providers that make the Website and my email work, and only to the extent they need it:

  • Squarespace (Squarespace Ireland Limited and Squarespace, Inc.), the website hosting, security, cookies and analytics. Squarespace acts as my processor, and for some data relating to how visitors use its platform it acts as an independent controller. See the Squarespace Privacy Policy.

  • Proton AG (Switzerland) – email service.

  • Google and Adobe – delivery of font files.

I may also disclose data where I am legally obliged to do so, for example in response to a lawful request from a court or public authority, or where necessary to establish, exercise or defend legal claims.

I do not sell personal data, and I do not share it with advertisers or marketing companies.

5. Transfers outside the EU/EEA

Some of the providers listed above are based, or store data, outside the European Economic Area:

  • Squarespace, Inc., Google and Adobe (United States): transfers rely on the EU–U.S. Data Privacy Framework, under which the European Commission has adopted an adequacy decision, and/or on the European Commission's Standard Contractual Clauses (Art. 45 and 46 GDPR).

  • Proton AG (Switzerland): Switzerland is covered by a European Commission adequacy decision (Art. 45 GDPR).

6. How long data is kept

  • Emails: as described in section 3.3 – deleted within 12 months of our last contact if they do not lead to consultations.

  • Cookies: for the lifetime of each cookie, as listed on Squarespace's cookie page linked in section 3.1, or until you delete them in your browser.

  • Analytics and server data held by Squarespace: for the periods set by Squarespace under its own policies.

7. How your data is protected

The Website is served over an encrypted connection (HTTPS). My Squarespace and email accounts are protected by strong passwords and two-factor authentication, and only I have access to them. No method of transmission over the internet is completely secure, but I take appropriate steps to protect the data I am responsible for.

8. Your rights

Under the GDPR you have the right to:

  • Access – find out whether I process data about you and receive a copy (Art. 15).

  • Rectification – have inaccurate data corrected (Art. 16).

  • Erasure – have your data deleted where there is no longer a reason to keep it (Art. 17).

  • Restriction – ask me to limit how I use your data in certain situations (Art. 18).

  • Data portability – receive data you gave me, based on consent or contract, in a commonly used electronic format (Art. 20).

  • Object – object to processing based on my legitimate interests (Art. 21).

  • Withdraw consent – at any time, where processing is based on consent, without affecting processing that took place before.

To exercise any of these rights, email me at alimsoufizadeh@pm.me. I will respond without undue delay and within one month at the latest; this can be extended by two further months for complex requests, in which case I will let you know. Exercising your rights is free of charge. I may ask for information to confirm your identity before acting on a request.

For data held by Squarespace as an independent controller, you can also contact Squarespace directly.

Complaints and legal remedies

If you believe your data is being processed unlawfully, I would appreciate the chance to resolve it with you first. You also have the right to lodge a complaint with the Hungarian supervisory authority:

Nemzeti Adatvédelmi és Információszabadság Hatóság (NAIH) – Hungarian National Authority for Data Protection and Freedom of Information Address: 1055 Budapest, Falk Miksa utca 9–11, Hungary Postal address: 1363 Budapest, Pf. 9 Website: www.naih.hu

If you live or work in another EU/EEA country, you may instead complain to the supervisory authority there. You also have the right to bring proceedings before a court; in Hungary, you may choose to bring the case before the regional court (törvényszék) of your place of residence.

9. Children

The Website is not directed at children under 16, and I do not knowingly collect personal data from them through the Website. If you are a parent or guardian and believe your child has sent me personal data, please contact me and I will delete it.

10. Automated decision-making

I do not use your data for automated decision-making or profiling that produces legal or similarly significant effects for you.

11. Links to other websites

The Website may contain links to other websites or social media profiles. Those sites have their own privacy policies, and I am not responsible for how they handle your data.

12. Changes to this policy

I may update this policy when my Website or the services I use change, or when the law requires it. The current version is always available on this page, with the date of the latest update shown at the top.

13. Contact

Alimohammad (Ali) Soufizadeh, Email: alimsoufizadeh@pm.me Website: www.alisoufizadeh.com