Legal
Privacy Policy
This notice explains what personal data I collect through this website, why I collect it, how long I keep it, and the rights you have under the EU General Data Protection Regulation (GDPR).
Last updated: 31 July 2026
1. Who I am
This website is owned and operated by Nadejda Savova, a psychologist and Emotional Self-Leadership educator based in Bulgaria. For the purposes of the GDPR, I am the data controller for personal data collected through this site.
Contact for any privacy matter: hello@nadejdasavova.com
2. What personal data I collect
- Identity and contact data - your name and email address when you subscribe, request the free guide, write to me or book a call.
- Message content - anything you choose to write in the contact form or in an email.
- Booking data - the information you provide when scheduling a conversation through Calendly.
- Technical data - IP address, browser type, device and pages viewed, processed by hosting and, where enabled, analytics.
- Consent data - a record of the cookie and email consent choices you make.
I do not knowingly collect special category data, and I ask that you do not include sensitive health or clinical details in website forms.
3. Newsletter subscriptions (Beehiiv)
If you subscribe to my newsletter, your name and email address are sent to Beehiiv, the email platform I use to store subscriber lists and send emails. You are asked to tick an unchecked consent box before subscribing, and every email contains an unsubscribe link. Beehiiv also keeps consent records and processes deletion requests. Unsubscribing at any time is free and takes effect immediately.
4. Contact form submissions
The contact form opens a message in your own email client, so your message is sent directly to my inbox rather than stored in a website database. I use the information only to reply to you and to keep a record of our correspondence.
5. Free guide downloads
To receive the free reflection guide you provide your name and email address and tick a separate, unchecked consent box. The guide is delivered to you and, if you have consented, your email may be added to my newsletter list in Beehiiv. Consenting to emails is not required in order to use the rest of the site.
6. Calendly booking information
Conversations are scheduled through Calendly. When you book, Calendly collects your name, email address, chosen time zone and any answers you give to the booking questions, and processes them as an independent service provider on my behalf. The Calendly embed is only loaded after you allow functional cookies; until then it is blocked and you can open Calendly in a new tab instead.
7. Cookies and analytics
The site sets only strictly necessary storage by default, including a record of your cookie choice. Optional cookies and third-party embeds are blocked until you consent through the cookie banner. Full details are in the Cookie Policy.
8. Legal basis for processing
- Consent (Art. 6(1)(a)) - newsletter emails, the free guide, optional cookies and third-party embeds.
- Performance of a contract or steps prior to it (Art. 6(1)(b)) - arranging and delivering sessions or programs you request.
- Legitimate interests (Art. 6(1)(f)) - responding to your enquiries, keeping the site secure and preventing abuse.
- Legal obligation (Art. 6(1)(c)) - accounting and tax records where a paid service is provided.
9. How long data is kept
- Newsletter data: until you unsubscribe, then deleted or anonymised.
- Enquiries and correspondence: up to 24 months after our last contact.
- Booking records: up to 24 months after the meeting.
- Accounting records: as required by Bulgarian law.
- Cookie consent record: up to 12 months, then you are asked again.
10. Third-party services
- Beehiiv - newsletter delivery and subscriber management.
- Calendly - appointment scheduling.
- Google Fonts - typography delivery; your IP address is processed by Google when fonts are requested.
- Google Analytics - only if analytics are enabled and only after you consent; not active by default.
- Email and hosting providers - for delivering this website and my email correspondence.
Some providers are located outside the European Economic Area. In those cases transfers rely on the European Commission’s Standard Contractual Clauses or an adequacy decision.
11. Data security
The site is served over encrypted HTTPS connections. Access to subscriber lists and my inbox is protected by strong passwords and, where available, two-factor authentication. I keep the data I hold to the minimum needed and review it periodically. No method of transmission over the internet is completely secure, but I take reasonable steps to protect your information.
12. Your rights under the GDPR
- Access to the personal data I hold about you
- Correction of inaccurate or incomplete data
- Deletion (“right to be forgotten”)
- Restriction of processing
- Data portability
- Objection to processing based on legitimate interests
- Withdrawal of consent at any time, without affecting processing already carried out
To exercise any of these rights, email hello@nadejdasavova.com. I respond within one month.
13. Complaints
If you believe your data has been handled improperly, you may lodge a complaint with the Bulgarian Commission for Personal Data Protection (Комисия за защита на личните данни), 2 Prof. Tsvetan Lazarov Blvd., Sofia 1592, Bulgaria, www.cpdp.bg. You may also complain to the supervisory authority in your own EU country of residence.
14. Changes to this policy
I may update this policy as the website or the services I use change. The date below always reflects the current version.
Last updated: 31 July 2026