Practical information

Privacy policy

Confidentiality is at the heart of everything we do. Here you can read how your information is handled when you use egolab.dk, contact us or start a course of sessions — described as concretely and plainly as possible.

Last updated: 19 July 2026

This page is an English translation provided for convenience. In case of any discrepancy between this translation and the Danish privacy policy (/privatlivspolitik/), the Danish version prevails.

1. Who is the data controller?

EGOLAB Psykologcenter ApS, CVR no. 40153381, Vendersgade 4, 2. sal, 1363 København K, is the data controller for the processing of personal data on this website and for the handling of your first enquiry.

If you have questions about our processing of your information — or wish to exercise your rights — you can contact us via the contact form.

2. One platform — independent therapists

EGOLAB runs the website and serves as the shared point of entry to a team of psychologists and therapists. The therapists are self-employed professionals with their own registered businesses (CVR numbers). This means:

EGOLAB Psykologcenter ApS is the data controller for the website, enquiries submitted via the forms and the initial matching process.
Your therapist is an independent data controller for their own client work — including the clinical record — once you start a course of sessions.

To find the therapist who suits you best, your enquiry may be shared between EGOLAB and relevant therapists in the team (matching and booking). This sharing takes place under a duty of confidentiality and covers only what is necessary to help you move forward.

3. When you contact us

When you write to us via the contact form, we process the information you provide yourself: your name, email address, phone number, who or which office you wish to contact, the topic of your enquiry, payment arrangements (for example insurance or a GP referral) and your message.

The purpose is to answer your enquiry, match you with the right therapist and offer you an appointment. The legal basis is Article 6(1)(b) of the GDPR (handling your request prior to entering into an agreement). If you include health information in your message, it is processed on the basis of your explicit consent (Article 9(2)(a)) — and by the therapists as part of healthcare provided under a duty of confidentiality (Article 9(2)(h)).

Encryption and secure delivery

The website is encrypted (https), and your message is sent via our email provider Proton (Switzerland — a country with an EU-approved level of protection) directly to the therapist you choose. If you select the "encrypted communication" option, our reply is sent as an encrypted message that can only be opened with the password you set in the form.

Spam protection

The forms are protected by Cloudflare Turnstile, which checks that the sender is human. In doing so, Cloudflare processes technical information such as your IP address and browser signals. No marketing cookies are used.

4. When you start a course of sessions

Before your first session, we ask you to complete an intake form with your name, address, date of birth or CPR number, contact details, payment arrangements and any consents (for example to contact a relative in the event of a heightened crisis).

Your CPR number is processed only where necessary — typically to retrieve your GP referral and settle with the public health insurance scheme (section 11 of the Danish Data Protection Act). The information is sent encrypted and directly to the therapist you will be starting with, and then becomes part of the therapist's clinical record.

5. Clinical records, confidentiality and insurance

Licensed psychologists are required by law to keep clinical records. The record is kept and stored by your therapist — as an independent data controller — in accordance with the Danish Psychologists Act, and is retained for a minimum of 5 years.

Everyone in the team works under a duty of confidentiality. The therapists may consult one another internally to give you the most qualified treatment, but information is not passed on outside this collaboration without your specific consent. The statutory exceptions are serious danger to your life or the lives of others, and substantiated concern for a child's wellbeing.

If we settle directly with your insurance company, we are required to disclose your name, the number of sessions and the overall topic of your course of sessions to the company.

6. AI Psychologist (chatbot)

Our AI Psychologist offers anonymous self-tests and exercises. You are not logged in, the conversation is not linked to your identity, and we recommend that you do not write anything that could identify you or others. Conversations are stored anonymously for up to 20 days; completed self-tests are stored anonymously and without any link to you.

The chat is powered by an AI model from an external provider (currently Anthropic). Your messages are sent to the provider in order to generate replies and, under the provider's API terms, are not used to train the model. Read the full description under Chatbot and privacy (in Danish).

7. Cookies and analytics

We do not use tracking cookies — which is why you will not see a cookie banner on this site.

Analytics: We use Plausible Analytics, which is cookie-free and measures only aggregated traffic (page views, referral sources and whether forms are completed). No personally identifiable information is stored, and the data is processed in the EU.
Essential cookies: Login cookies are set only for the website's administrators — never for visitors.

8. Embedded content from third parties

Some pages contain content from other services. When a page with such content is displayed, the service may register your visit (typically your IP address and technical information), just as if you had visited the service directly:

Google Maps — directions maps on the office pages.
YouTube and Vimeo — videos on selected pages, for example about types of therapy and mindfulness.
Google Fonts — fonts loaded from Google's servers.

We do not embed social media tracking tools and do not use advertising pixels.

9. Who do we share information with?

The therapists in the team — as described above, for the purposes of matching, booking and treatment.
Email provider — Proton AG (Switzerland), which provides encrypted email.
Hosting provider — Azehosting.dk (a Danish hosting provider), which runs the website and stores its data.
AI provider — for the chatbot (currently Anthropic), see section 6.
Cloudflare — spam protection for the forms.
Plausible — cookie-free analytics (EU).
Insurance companies — only when settling payment, see section 5.

We never sell your information, and we do not share it for marketing purposes.

10. How long do we keep your information?

Enquiries: no longer than necessary to handle your request and offer you an appointment — if you start a course of sessions, the information instead becomes part of the course with your therapist.
Clinical records: a minimum of 5 years with your therapist, in accordance with the record-keeping rules.
Chatbot conversations: anonymously for up to 20 days.
Accounting records: 5 years from the end of the financial year, in accordance with the Danish Bookkeeping Act.

11. Your rights

Under the GDPR, you have the right to access the information we process about you, and the right to have information corrected or deleted, to have the processing restricted, to object, and to data portability. Where we process information on the basis of your consent, you can withdraw that consent at any time.

Contact us as described in section 1 — or contact your therapist directly for matters concerning the clinical record and your course of treatment. You also have the right to lodge a complaint with the Danish Data Protection Agency (Datatilsynet): www.datatilsynet.dk.

12. Changes to this policy

We update this policy whenever the website or the way we process information changes. The date at the top shows the most recent version.