Privacy policy

This policy describes what PsyAccess actually does with personal data today — no more, no less. The site is pre-launch; items marked team@statesofmind.com will be finalized before the production domain goes live, and this policy will be updated accordingly.

Who is responsible (controller)

The controller for personal data processed on this site is Pink Elephant, Unipessoal Lda, Portugal — Edifício Amoreiras Square, Rua Carlos Alberto da Mota Pinto, no. 17, second floor, 1070-313 Lisboa, Portugal (NIPC 519056582). Data-protection contact: team@statesofmind.com. Company details are on the imprint page.

The provider enquiry form

Provider pages carry a non-binding enquiry form. If you use it, we process the data you enter: your name, your email address and your optional message, together with a record of your consent. Because an enquiry about a mental-health treatment can reveal health-related information, we only process it with your explicit consent under Art. 9(2)(a) GDPR, which the form collects before sending is possible.

• Purpose and recipient: your enquiry is transferred to the single provider you chose, at your instruction, so that the provider can answer it. We do not use enquiry data for marketing and we do not share it with anyone else.
• Legal basis: explicit consent (Art. 9(2)(a) GDPR in conjunction with Art. 6(1)(a) GDPR). You can withdraw consent at any time with effect for the future using the contact above.
• Retention: team@statesofmind.com — the exact retention period for enquiry data will be published here at team@statesofmind.com.

The eligibility check stores nothing

The eligibility check runs entirely in your browser. Your answers are held in the page's memory only, are never stored, and are never sent to us or to anyone else. Closing or reloading the page discards them. No account is required and no identifier is attached to your answers.

Cookies and analytics

This site currently sets no cookies and runs no analytics or tracking scripts. If that changes, this policy will be updated first and any non-essential technology will ask for consent before it runs.

Data about listed professionals

Provider listings contain professional — not private — data about clinics, programs, trial sites and, in some cases, named practice holders: name, professional address, professional contact details, registry entries and treatment information. This data is sourced from public national registries and official program lists, as described in our methodology. We process it on the basis of legitimate interest (Art. 6(1)(f) GDPR) in operating a transparent, registry-verified public directory of licensed healthcare providers.

If you are a listed professional, you have the right to object (Art. 21 GDPR) to this processing, and the right to have inaccurate data corrected. Use the contact above or the contact page; corrections are reviewed within 5 working days.

Hosting and server logs

The site is served as static pages by our hosting provider, which may process technical connection data (such as IP addresses) in server logs for security and delivery. Details of the production hosting setup and any processing agreement: team@statesofmind.com.

Your rights

Under the GDPR you have the right of access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and objection (Art. 21), as well as the right to withdraw consent at any time and the right to lodge a complaint with a supervisory authority — in Portugal, the CNPD (Comissão Nacional de Proteção de Dados).