Privacy Policy
PsychArts | Miletta Killam-Verreij Last updated: April 2026
1. Who We Are
PsychArts is an independent psychology practice operated by:
Miletta Killam-Verreij Psychologist | Psychotraumatologist Landgraaf, Limburg, Netherlands Website: www.psycharts.nl Email: info@psycharts.nl KvK: 69328900 AGB code: AGB practice code: 94067705 AGB personal code: 94119325
2. What Data We Collect and Why
2.1 Clients (therapy and coaching)
As a healthcare provider, we process the following personal data for the purpose of providing psychological care:
Identity and contact data:
- Name, date of birth, address
- Email address, phone number
- Health insurance details and policy number
- GP details (name and practice)
Health data (special category):
- Reason for referral and presenting complaints
- Psychological and psychiatric history
- Session notes and treatment plans
- Progress reports and outcome measurements (ROM)
- Correspondence with other healthcare providers
Legal basis: Treatment agreement (WGBO) and legal obligation (healthcare law).
2.2 Website visitors
When you visit psycharts.nl, we collect:
- IP address (anonymised)
- Browser type and settings
- Pages visited and time spent
Legal basis: Legitimate interest (website security and improvement).
2.3 Shop customers (psycharts.nl/shop)
When you purchase a product (e-book, course):
- Name and email address
- Payment data (processed by WooCommerce/Stripe – we do not store card details)
- Purchase history
Legal basis: Contract (order fulfilment).
2.4 Contact form and newsletter
When you contact us or subscribe:
- Name and email address
- Content of your message
Legal basis: Consent.
3. Health Data – Special Protection
Health data is special category personal data under the GDPR (AVG) and receives the highest level of protection.
Your health data is:
- Only accessible to your treating psychologist (Miletta Killam-Verreij)
- Never sold or shared for commercial purposes
- Only shared with third parties with your explicit written consent, or when legally required (e.g. crisis situations involving risk to life)
- Stored in a secured, encrypted client record system (EPD)
- Transmitted only via certified secure email (NTA 7516 compliant)
4. Who We Share Your Data With
We only share your data when necessary:
| Recipient | Purpose | Legal basis |
|---|---|---|
| Your GP or referring physician | Treatment coordination | Treatment agreement + consent |
| Health insurer (via Infomedics) | Invoicing for insured care | Legal obligation |
| UWV / employer (re-integration) | Progress reporting | Your explicit consent |
| IT service providers (hosting, email) | Technical operation | Processing agreement (AVG) |
We have processing agreements (verwerkersovereenkomsten) in place with all relevant third-party processors.
We never share your data with:
- Third parties for marketing purposes
- Parties outside the EU without adequate protection
- Anyone without a valid legal basis
5. How Long We Retain Your Data
| Data type | Retention period | Legal basis |
|---|---|---|
| Client health records | 20 years from last treatment | WGBO (medical records law) |
| Minors’ records | Until age 18 + 20 years | WGBO |
| Financial records | 7 years | Tax law |
| Website data | Maximum 26 months | AVG |
| Newsletter subscribers | Until unsubscribe | Consent |
| Shop purchase data | 7 years | Tax law |
6. Your Rights
Under the GDPR (AVG) you have the following rights:
- Right of access — you may request to see your personal data
- Right to rectification — you may request correction of incorrect data
- Right to erasure — you may request deletion (subject to legal retention obligations)
- Right to restriction — you may request we limit processing of your data
- Right to data portability — you may request your data in a portable format
- Right to object — you may object to certain types of processing
- Right to withdraw consent — where processing is based on consent, you may withdraw at any time
To exercise your rights, contact us at: info@psycharts.nl
We will respond within 30 days.
Please note: For clinical health records, the right to erasure is limited by the legal retention obligation under the WGBO (20 years). We will always inform you of any limitations that apply.
7. Complaints
7.1 Complaints about your care (Wkkgz)
PsychArts is a member of the Nederlands Instituut van Psychologen (NIP) and has joined the NIP-facilitated Wkkgz complaints procedure for solo-practising psychologists.
If you have a complaint about your care or treatment and we have not been able to resolve it together, you can contact the independent complaints officer at:
Centraal Bureau Klachtenmanagement in de Zorg (CBKZ) Email: klachten@cbkz.nl Phone: 088 – 024 5190 Post: Antwoordnummer 570, 4200 WB Gorinchem
The complaints officer is independent and will contact you within two working days of receiving your complaint form. They will guide both you and your care provider in finding a resolution where possible.
You can download the NIP complaint form directly from Klachtenformulier-NIP-regeling-1 or request a paper version from CBKZ by phone or email.
Please note: this complaints procedure applies only when services are not funded under the Jeugdwet or Wmo. The complaints officer will verify this when your complaint is received.
7.2 Complaints about your data (AVG)
If you believe we have not handled your data correctly, you have the right to file a complaint with the Dutch Data Protection Authority:
Autoriteit Persoonsgegevens Website: www.autoriteitpersoonsgegevens.nl Phone: 088 – 1805 250
We would appreciate the opportunity to resolve any concerns directly before you contact the supervisory authority. Please contact us first at info@psycharts.nl.
8. Security
We take the protection of your personal data seriously. Our security measures include:
- Encrypted client record system (EPD)
- Certified secure email (SecuMailer, NTA 7516 compliant)
- Two-factor authentication for all systems containing client data
- Password-protected devices
- Regular security updates
- Staff bound by professional confidentiality (beroepsgeheim)
In the event of a data breach that poses a risk to your rights and freedoms, we will notify the Autoriteit Persoonsgegevens within 72 hours and inform affected individuals without undue delay.
9. Cookies
Our website uses minimal cookies:
| Cookie | Purpose | Duration |
|---|---|---|
| Session cookies | Website functionality | Session only |
| WooCommerce | Shopping cart | Session / 2 days |
| WordPress login | User login (admin only) | 2 days – 2 weeks |
We do not use tracking cookies or advertising cookies.
You can manage cookie preferences in your browser settings.
10. Professional Confidentiality
As a registered psychologist, Miletta Killam-Verreij is bound by professional confidentiality (beroepsgeheim) under Dutch law. This means that information you share in a therapeutic context is treated with the strictest confidence and is not disclosed without your consent, except in the following circumstances:
- Imminent risk to your life or the life of others
- Legal obligation (court order)
- Legally mandated reporting (e.g. child abuse — meldcode kindermishandeling)
11. Changes to This Policy
We may update this privacy policy from time to time. The most current version will always be available at www.psycharts.nl/privacy-policy. Significant changes will be communicated to active clients directly.
12. Contact
For any questions about this privacy policy or how we handle your data:
Miletta Killam-Verreij PsychArts 📧 info@psycharts.nl 📱 0644 460296 🌐 www.psycharts.nl 📍 Landgraaf, Limburg, Netherlands