Contact Privacy Notice
Notice version: 2026-09-05
This notice explains how PillarX handles information submitted through the PillarX contact form. The same form appears on the PillarX home page and on the PillarX Practice page, and this notice covers both.
By ticking the acknowledgement box on the contact form, you confirm that you have read this notice. This acknowledgement is not consent to marketing.
Who is responsible
PillarX is the controller for this contact request. For privacy questions, email PillarX's privacy contact at pillarx@mypillarx.com.
What we collect and why
We collect your full name and email address. You may also add a phone number and a message, both optional. We use these details only to understand and respond to your enquiry about personal wellbeing, team wellbeing or professional practice tools. We also record which of our pages the form was submitted from, so that we can tell a practice enquiry from a general one.
Legal basis for contact details
We process your contact details to take steps at your request before entering into a possible agreement (GDPR Article 6(1)(b)) and, where applicable, for our legitimate interest in answering general enquiries and protecting the form from misuse (Article 6(1)(f)).
Optional health-related information
You do not need to provide health information. If you choose to include health-related information in the optional message, we process it only after your separate explicit consent under GDPR Article 9(2)(a), solely to answer your enquiry.
Service providers and recipients
Cloudflare Turnstile protects this form from automated abuse and supports its security. For verification, Cloudflare processes your IP address, a one-time verification token, and browser and device signals. The default Turnstile widget returns that one-time token. Only if pre-clearance is enabled for the relevant Cloudflare zone may Cloudflare also set the cf_clearance cookie; its lifetime follows the zone's Challenge Passage setting, for which Cloudflare's default is 30 minutes. Where this processing involves a transfer outside the European Economic Area, Standard Contractual Clauses (SCCs) and the additional technical safeguards described in our full Privacy Policy apply. Our database provider, Supabase, stores the inquiry, and the optional message is encrypted. Resend receives your email address only to deliver the confirmation message; submitted names, phone numbers and message content are not included in the internal notification email.
How long we keep the information
The inquiry is deleted from our database after 24 months. Resend delivery logs are retained separately for approximately 30 days. Deleting the inquiry also removes its wrapped encryption key, making the encrypted optional message unrecoverable.
Your rights
You may request access, correction or deletion, object to processing based on legitimate interests, or withdraw explicit consent at any time without affecting earlier lawful processing. Email pillarx@mypillarx.com. We may ask for information to verify your identity before acting on a request. You may also lodge a complaint with the Hellenic Data Protection Authority or your local supervisory authority.