The form goes through Meta
When you hit send, the site doesn't transmit anything itself. It opens WhatsApp with the message ready and you send it. So the details pass through Meta, under Meta's own terms.
If you'd rather not, just call me.
Privacy policy
What I collect, why, where it ends up and how you get it deleted. No legal fog.
Last updated: 29 July 2026
Who I am
The person responsible for your data is Eleftherios Legakis, trading as lef.recovery, based in Alimos, Attica, Greece.
- Phone: +30 697 051 0280
- Email: lefrecovery2@gmail.com
There is no data protection officer — this is a one-person business.
What I collect
Only what you give me. Nothing is collected automatically.
From the contact form
- Name
- so I know who I'm talking to
- Phone
- to arrange a time
- Area
- to work out the distance
- Service you're after
- so I know what to bring
- Your message
- whatever you choose to write
A word about the message. The field asks where it hurts and since when. Anything you write there about your health counts as a special category of personal data. I only process it because you give explicit consent by ticking the box. Write what's needed and no more — I don't need your medical history to book an appointment.
If you call or write
I keep your number and what you tell me, for as long as it takes to help you.
On what basis
- Contact details
- to answer your request
- Health details in your message
- your explicit consent
- Appointments and session history
- delivering the service
Consent is given by the checkbox on the form and can be withdrawn whenever you like, with one message.
Where it actually goes
This is the part most websites don't spell out.
Gmail
Email lands with Google
My address is a Gmail one. Anything you write to me is stored on Google's servers.
Nobody else. I don't sell, rent or share your details. There is no mailing list and you will not get marketing from me.
Cookies and tracking
None. That's why there's no consent banner.
- — No cookies. The site sets none at all.
- — No analytics. No Google Analytics, nothing equivalent.
- — No pixels from Facebook or anyone else.
- — Fonts are self-hosted. Not loaded from Google, so your IP address never leaves.
The hosting provider keeps technical logs (IP, time, page) for security, as every web server does. I have no commercial access to those.
How long I keep it
- Message with no booking
- up to 12 months
- Client details with bookings
- while we're working together
- After the last session
- up to 5 years
Ask for deletion earlier and it's deleted — unless a tax rule requires a receipt to be kept.
Your rights
One message to lefrecovery2@gmail.com and you can ask me to:
- — Show you what I hold about you
- — Correct anything wrong
- — Delete it
- — Stop using it
- — Hand it over as a file
- — Withdraw your consent, at any time
I reply within 30 days. You don't have to explain why.
If you think I've mishandled your data, you can complain to the Greek Data Protection Authority — dpa.gr, 1-3 Kifissias Ave, 115 23 Athens.
Something not sitting right?
Ask me. You don't need a lawyer to get an answer.