Privacy policy

As healthcare professionals, we have a legal obligation to keep a file for each patient we serve. This file contains information that is essential for delivering quality care and/or for making a sound evaluation.

In the context of our services, we process your personal data and have prepared this privacy statement to inform you about how we handle our commitment to your privacy.


Personal data is processed by:

Psychology within Reach, sole proprietorship, Chamber of Commerce No. 66848687

Vuurvlindersingel 403. 3544 DB, Utrecht. The Netherlands.

+31 30 636 8981 /

Psychology within Reach obtains personal data directly provided by you, for example, data you provide to us through the website, email, phone and online applications. We may also obtain certain personal data indirectly (e.g. via Vecozo) in the context of our services.


Psychology within Reach processes the following categories of personal data:

  • Name and address details
  • Contact information, such as email address and phone numbers
  • Date and place of birth
  • Sex
  • BSN (only treatments in the Netherlands according to the Wbsn-z)
  • Content of the communication
  • IP address
  • Transactional Payment Methods
  • Medical and health-related information included in each patient’s record


Psychology within Reach processes this personal data for various purposes, such as:

  • Maintaining contact;
  • Providing quality care;
  • Performing administrative tasks;
  • Service improvement;
  • Billing;
  • Fund-raising and fund-raising measures;
  • Compliance with legal obligations;
  • Dispute management.


We process certain personal data for the purpose of implementing our processing agreement with you, or in order to comply with a legal obligation (Organic Law 15/1999, of 13 December and Dutch Medical Treatment Agreement Act or WGBO).

We also process personal data because Psychology within Reach has legitimate interests to do so. These legitimate interests are:

  • Being able to provide services as efficiently as possible;
  • Protecting financial interests;
  • Improving our services;
  • Security and management of our systems;

If personal data is processed on the basis of consent, this will be requested separately.


As healthcare professionals, we have a duty of confidentiality. This means that we only talk about you with others with your explicit consent. Only in special cases does the law give us the right to provide information without your consent. And in such cases, as a rule, we will also contact you first to discuss it. We will only skip this step if we believe that the interests and safety of others, such as children in your care, may be harmed.

In the context of its services, Psychology within Reach may exchange personal data. Psychology within Reach may use third-party services for the aforementioned purposes, such as the IT providers of our website and our computer systems. These third parties may only process your personal data for the purposes mentioned above.

Finally, Psychology within Reach will not provide your data for commercial or charitable purposes.


Although we do not engage directly with patients through social media, Psychology within Reach and those working under this firm maintain profiles on Facebook, LinkedIn, and Instagram to gain visibility among their potential patients.

Similarly, when Stripe, Microsoft Office tools (e.g. Teams) or Google Analytics are used in contact with you, your personal data may be processed outside the EEA. These parts are certified as “EU-US Privacy Shield”, so they will comply with European privacy regulations.


Psychology within Reach will not process your personal data for longer than is necessary for the purposes set out in this privacy statement. This means that your personal data will be retained for as long as it is necessary to achieve the relevant purposes.

Certain data needs to be retained for longer, because Psychology within Reach must comply with legal withholding obligations, such as the tax withholding obligation and the Medical Treatment Agreement Act. The retention period for medical data is 20 years and for financial data 7 years.


We believe it is important that your personal data is protected from loss or unauthorized access.

That’s why at Psychology within Reach we’ve taken appropriate security measures, such as maintaining regular backups of the data we process, keeping antivirus software and our SSL certificates up to date, enabling two-factor authentication on all systems that allow it, and working only with companies (i.e.,  Dasi eClinic, and any other IT company involved in the management of our services), which adhere to the highest security standards.


Some of our tools also perform behavioral analysis of the information collected. This information may be used to improve our services offerings.


Cookies are used on the website to improve online services. Cookies process your IP address and system information on your device. To find out more about these cookies, we have activated the relevant notices where they come into play.


You have the right to make a request to Psychology within Reach for access to your personal data. After receiving your request, you will receive an overview of your personal data within 1 month. If this reveals inaccuracies, you can request that your data be adjusted, supplemented, deleted (within the limits of Art. 17 GDPR) or that its processing be restricted.

If you disagree with the information in your file, you can ask us to add your own statement (your opinion) to your file.

You can also ask Psychology within Reach to transfer your personal data or object to the processing of your personal data, where special personal circumstances arise.

Questions about this privacy statement or a request about the processing of your personal data can be sent to:

Nuria Maldonado Bellido, licensed psychologist and founder of Psychology within Reach

Vuurvlindersingel 403, 3544 DB Utrecht. The Netherlands. +31306368981,

If you have any complaints about the processing of your personal data by Psychology within Reach, please let us know. If we do not reach an agreement, you have the right to lodge a complaint with the privacy regulator. In the Netherlands, you can contact the Dutch Data Protection Authority to do so.


This privacy statement was last modified on January 1, 2023.

Psychology within Reach may adjust this privacy statement. New versions are always posted on the website. Therefore, we advise you to check this statement regularly, so that you are aware of any possible changes.