Privacy & Confidentiality Notice

Andes Institute — Supervision

Purpose of This Notice

This Notice explains how Andes handles personal data and confidentiality for supervision services, including bookings, fit conversations, and paid supervision sessions.

Confidentiality in Supervision

Supervision is confidential between Andes and you (the supervisee). Case discussion must protect your clients’ anonymity and remain consistent with your client agreements and any applicable organisational policies.

Confidentiality is not absolute. Andes may disclose information if required by law (for example, a valid court order) or where a lawful safeguarding/public-interest basis applies. Where appropriate and lawful, Andes will inform you and will limit disclosure to what is necessary.

Information We Collect

Andes may collect:

  • Identity and contact data: name, email, phone (optional), country/time zone, professional role

  • Booking data: appointment type, date/time, scheduling messages

  • Session data: brief supervision notes about your professional questions, themes, decisions, and actions agreed

  • Payment data: transaction confirmations and invoices/receipts (full card details are not stored by Andes if a third-party processor is used)

  • Technical data: basic website/security logs where applicable

Anonymisation expectation: You should not provide identifiable client information in supervision. If you include identifying information despite this instruction, you are responsible for that disclosure.

How We Use Your Data

Andes uses your data to:

  • provide and administer supervision services (bookings, sessions, communications)

  • take payments and maintain financial records

  • maintain continuity and professional accountability through brief notes

  • protect confidentiality and secure delivery of online services

  • handle complaints and service quality issues where necessary

Lawful Basis for Processing

Depending on your location and applicable law, Andes relies primarily on:

  • performance of a contract (to deliver the services you book)

  • legitimate interests (to run a safe, secure, and professionally accountable supervision service), where these interests are not overridden by your rights

  • compliance with legal obligations (e.g., tax/accounting requirements)

Special Category Data

Supervision can involve discussion of sensitive themes. Andes minimises what it records and expects anonymisation of client data. If sensitive data is processed, Andes applies enhanced confidentiality and reasonable security safeguards.

Who We Share Data With

Andes may share data with service providers necessary to deliver the service, such as:

  • booking/scheduling provider(s)

  • video-call provider(s)

  • payment processor(s)

  • professional advisers (e.g., accountant) where necessary

  • legal authorities where Andes is legally required to disclose information

Andes does not sell your personal data.

International Transfers

Online tools may process data on servers located in other countries. Where international transfers occur, Andes aims to use reputable providers and reasonable safeguards.

Security

Andes takes reasonable measures to protect your data, including access controls, secure storage, and minimisation. You are also expected to take reasonable steps on your side (private space, secure connection, careful handling of notes and case material).

Retention

Andes keeps data only as long as needed for the purposes above:

  • booking and administrative records: up to [2 years]

  • supervision notes: up to [5 years] after the last session (unless a shorter period is requested and feasible)

  • financial records: for the period required by applicable tax/accounting rules

  • security logs: for as long as necessary for security and operational purposes

Your Rights

Depending on your location and applicable law, you may have rights to:

  • access your personal data

  • correct inaccurate data

  • request deletion (where lawful and applicable)

  • restrict or object to certain processing

  • request data portability (in some cases)

To exercise your rights, email [privacy at andes.institute]. Andes may need to verify your identity.

Complaints

If you have a concern about privacy, contact [privacy@andes.institute] first. You may also have the right to complain to your local data protection authority.

Changes to This Notice

Andes may update this Notice from time to time. The effective date below shows the latest version.

Last update: January 23, 2026

Privacy contact: privacy at andes.institute