Data Protection

Privacy Policy

Last updated: 3 October 2026

This Privacy Policy explains how personal data is processed in connection with this website (drtalya.com and its subdomains). It is provided under the Swiss Federal Act on Data Protection (revFADP) and, where applicable, the EU General Data Protection Regulation (GDPR).

1. Who is responsible

The controller is Natalka Plyushcheva, known professionally as Dr. Talya (formerly published as Dr. Talya Young), Zurich, Switzerland. Contact: mail@drtalya.com.

2. What data we process & why

  • Email correspondence: if you write to us via the email link, we process your email address and message to answer your enquiry.
  • Authentication of protected areas: the gated areas (OrthoLectures, OrthoLibrary, ChatTTT) are protected by Cloudflare Access. To sign in, your email address is processed and a one-time login code is sent to it; this is necessary to grant and secure access.
  • Course access records: while you are signed in to OrthoLectures, we record each page you open (time, path, role, status, country) with your email address, to administer course access and see which materials are used (legitimate interest, GDPR Art. 6(1)(f)). Only Dr. Talya and her content manager review them.
  • Knowledge-base usage: within the gated OrthoLibrary & ChatTTT, queries you submit are processed to return search results and AI-assisted answers.
  • Hosting & security: our hosting and content-delivery providers automatically process technical data (such as IP address and request logs) to deliver and secure the site.

3. Cookies

This site uses only strictly necessary cookies set by Cloudflare Access for sign-in on the protected areas. These are essential for authentication and do not require consent. We use no analytics, advertising or tracking cookies, so no cookie banner is shown.

4. Recipients

We use the following service providers, who process data on our behalf:

  • Vercel (website hosting)
  • Cloudflare (content delivery, security, Cloudflare Access sign-in & storage of course access records)

The gated knowledge base may use AI/LLM service providers to process submitted queries.

5. International data transfers

Data may be processed in the United States by Vercel and Cloudflare. Both are certified under the Swiss–US and EU–US Data Privacy Framework (the Swiss–US adequacy decision took effect on 15 September 2024). EU Standard Contractual Clauses with the Swiss addendum apply as an additional safeguard.

6. Retention

We keep email correspondence only as long as needed to handle your enquiry and any follow-up. Authentication cookies are session-based or short-lived. Server logs are retained for a limited period for security and operational purposes. Course access records are deleted at the latest 12 months after the course ends.

7. Your rights

Under the revFADP and, where applicable, the GDPR, you may request access to, correction or deletion of your personal data, and may object to or ask us to restrict certain processing, including course access records. To exercise these rights, contact mail@drtalya.com. You may also lodge a complaint with the Swiss Federal Data Protection and Information Commissioner (FDPIC) or, for EU residents, your national supervisory authority.

8. No automated decision-making

We do not carry out automated decision-making or profiling that produces legal or similarly significant effects.

9. Changes to this policy

We may update this Policy if the site changes, for example if analytics, a contact form or paid offerings are added. The date above shows the last update.