Privacy Policy
Held by Dana · Dana Biechonski Fernandes heldbydana.com · dana@heldbydana.com
Last updated: May 2026
This Privacy Policy explains how Dana Biechonski Fernandes, operating as Held by Dana (heldbydana.com), collects, stores, and uses the personal data of visitors and clients. It has been written in accordance with the General Data Protection Regulation (GDPR), which came into force on 25 May 2018.
Dana Biechonski Fernandes is based in Portugal and is the data controller for this website.
If you have any questions about this policy, please contact: dana@heldbydana.com
A. What personal data do we collect?
Personal data is any information that can be used to identify you. We collect personal data in the following ways:
Contact form
· Your name
· Your email address
· The content of your message
Newsletter (via Wix)
· Your name
· Your email address
You may opt in to receive our newsletter through the website. We only add you to our mailing list with your explicit consent.
Payment (via Stripe)
· Your name
· Your email address
· Billing information and payment details Payments are processed securely through Stripe.
We do not store your full payment card details — these are handled directly by Stripe in accordance with PCI-DSS standards.
Website analytics (via Wix Analytics)
· Anonymised visitor data — pages visited, session duration, approximate location, device type, browser Analytics data is collected to help us understand how visitors use the site and improve the experience.
No individually identifiable data is collected through analytics.
Health information
You may choose to share health or personal background information when enquiring about therapy or supervision.
This is entirely voluntary and is used only to provide you with the most appropriate support.
B. Why do we collect your data?
Contact form
We have a legitimate interest in responding to enquiries. Your data is used solely to reply to your message and for no other purpose without your consent.
Newsletter
With your consent, we use your name and email to send updates including upcoming offerings, articles, and events.
You may unsubscribe at any time using the link in any email.
Payment
We collect billing information as part of a legal contractual transaction.
We may send invoices, receipts, or reminders by email. Payment records are kept for accounting and tax purposes.
Analytics
We use anonymised analytics data to improve the website experience.
This data cannot be used to identify individual visitors.
Health information
Health information is used solely to serve you in the most appropriate and beneficial way. It is kept strictly confidential and never shared with third parties without your explicit consent.
C. Who has access to your data?
Your personal data is accessed only by Dana Biechonski Fernandes.
We do not sell, rent, or share your data with third parties for marketing purposes.
We use the following third-party services to operate this website:
Wix.com
This website is hosted on Wix.com. Data submitted through contact forms, the newsletter, and analytics may be stored within Wix's secure infrastructure. For more information: wix.com/about/privacy
Stripe
Payments are processed through Stripe, Inc. Stripe handles your payment data securely and in accordance with PCI-DSS standards. Stripe may store your billing information as required for payment processing and fraud prevention.
For more information: stripe.com/privacy
Wix Analytics
Website analytics are provided by Wix. Data collected is anonymised and used only to understand general website usage patterns. No individual visitors are identified.
These third-party providers are prohibited from using your data for any purpose other than providing their services to us.
D. Cookies
This website is built on Wix.com, which uses cookies as part of its standard infrastructure.
The following cookies may be present:
· svSession — Permanent. Used for user activity and analytics.
· hs — Session. Used for security.
· XSRF-TOKEN — Persistent. Used for security.
Stripe may also set cookies related to payment processing and fraud prevention.
Your consent for the use of cookies is requested through a banner when you first visit the site. You may adjust or block cookies through your browser settings at any time.
E. How long do we keep your data?
Contact form submissions — up to 4 years, or until you request deletion
· Newsletter subscription — until you unsubscribe or withdraw consent
· Payment records — 10 years, as required by Portuguese tax law
· Health information — up to 4 years after your last contact
· Analytics data — anonymised; retained as per Wix's standard data policy
If a legal matter arises involving your data, we will retain the relevant data until that matter is resolved.
F. Your rights
Under GDPR, you have the following rights regarding your personal data:
· The right to access — request a copy of the data we hold about you
· The right to rectification — ask us to correct inaccurate data
· The right to erasure — request that we delete your data
· The right to restrict processing — ask us to limit how we use your data
· The right to object — object to processing based on legitimate interests
· The right to data portability — request your data in a portable format
· The right to withdraw consent — at any time, where processing is based on consent
To exercise any of these rights, please contact: dana@heldbydana.com We will respond to all requests within 30 days.
You also have the right to lodge a complaint with the Portuguese data protection authority (CNPD) at cnpd.pt if you believe your data has been handled unlawfully.
G. Third-party links
This website may contain links to external websites. We are not responsible for the privacy practices of those sites and encourage you to review their policies before sharing any personal information.
H. Updates to this policy
We reserve the right to update this privacy policy at any time. Changes will be posted on this page with an updated date. If we make significant changes, we will make reasonable efforts to notify you — for example, by email if we hold your address.
We recommend reviewing this page periodically to stay informed.
J. Therapeutic and supervisory relationships
Individuals who enter into individual therapeutic work, supervision, or any structured container with Dana Biechonski Fernandes will be asked to sign a separate data and consent agreement prior to beginning. This agreement covers the specific conditions of that working relationship — including the handling of clinical notes, session content, confidentiality, and any health information shared within the therapeutic process.
This privacy policy applies to all visitors and users of this website. The separate client agreement applies additionally to those engaged in direct clinical or supervisory work.
Disclaimer
Held by Dana strives to provide accurate and up-to-date information on this website. We reserve the right to make changes without notice and cannot be held liable for unintentional errors or omissions.
Contact
For any questions about this privacy policy or how your data is handled:
· Email: dana@heldbydana.com
· Website: heldbydana.com · Based in Portugal — operating under EU/GDPR regulation