This policy explains what personal information Code Thread Creative collects, why it is collected, and what happens to it. It applies to this website and to enquiries made through it.
Who is responsible
Code Thread Creative is the data controller for the information described here. If you have any question about this policy, or about information held about you, contact moragregoriou@hotmail.com.
What is collected
When you send an enquiry through this site, the form collects:
- Your name
- Your email address
- Your phone number, if you choose to give one
- Which kind of session you are interested in, if you select one
- Whatever you write in the message field
The only payment taken is a deposit to hold your place at a workshop or event. That is handled by Stripe, the payment provider. Your card details are entered with Stripe and go straight to them, and are never seen or stored by Code Thread Creative. Card details are never stored on this website, and the site does not use advertising or tracking cookies.
Information about your health
An enquiry about therapy may include information about your health or wellbeing. Under the General Data Protection Regulation this is special category data and is treated with additional care. Please share only what you feel is necessary at the enquiry stage. Anything you go on to discuss in sessions is covered by the separate confidentiality agreement made at the start of working together.
Why it is used
Your information is used to reply to your enquiry, to arrange and provide sessions, to take and record a deposit where you book a place at a workshop or event, and to keep the records a practitioner is required to keep. The lawful basis is your consent when you make an enquiry, and legitimate interest in responding to it. Where you pay a deposit, the basis is performance of a contract with you. Where health information is involved, the additional basis is the provision of health or social care.
Who it is shared with
Your information is not sold, and is not shared for marketing. It may be handled by the services used to run this site and its email, which act on instruction only. Where you pay a deposit, Stripe processes that payment and handles your card details under its own privacy policy. Information is disclosed to anyone else only where there is a legal obligation to do so, or where there is a serious risk of harm to you or someone else.
How long it is kept
Enquiries that do not lead to sessions are kept only for as long as there is a reason to keep them, and are then deleted.
Records relating to sessions are confidential. They are held securely, they are not seen by anyone else, and they are kept only for as long as professional practice requires, after which they are securely destroyed.
Your rights
You have the right to ask what information is held about you, to have it corrected, to have it deleted, to restrict or object to how it is used, and to withdraw consent at any time. To exercise any of these, contact moragregoriou@hotmail.com. There is no charge, and a response will be provided within one month.
If you are not satisfied with the response, you can complain to the Office of the Commissioner for Personal Data Protection, the supervisory authority in Cyprus, at gov.cy/dataprotection, by email to commissioner@dataprotection.gov.cy, or on +357 22 818 456.
Changes to this policy
This policy may be updated from time to time. The date below shows when it was last reviewed.
Last reviewed: 22 September 2026