Privacy & Data Protection Policy

1. Data Controller

The data controller responsible for your personal data is:

2. Personal Data We Collect

We may collect and process the following categories of personal data:

Identity Data

• Full name
• Date of birth (if provided)

Contact Data

• Email address
• Telephone number

Account & Usage Data

• Account registration details
• Appointment history
• Login activity
• User preferences

Payment Data

• Transaction references
• Billing information

(We do not store full card details. Payments are processed by third-party payment providers.)

Technical Data

• IP address
• Device and browser information
• Cookies and usage analytics

Service-Related Data

• Appointment details
• Limited interaction records between users and professionals

The Platform does not record or store therapy sessions, video calls, audio recordings, or message content.

3. How We Use Your Data

We process personal data for the following lawful purposes:

• To create and manage user accounts
• To facilitate appointments and platform functionality
• To process payments and issue invoices
• To provide customer support
• To ensure platform security and prevent misuse
• To comply with legal and regulatory obligations
• To improve and optimise the Platform

4. Legal Bases for Processing

• Performance of a contract
• Legal obligation
• Legitimate interests
• Consent (where required, e.g. marketing communications)

5. Data Sharing

Your personal data may be shared with:

• Payment service providers
• Technology and hosting providers
• Independent professionals providing services via the Platform (limited data only)
• Regulatory or legal authorities where required by law

We never sell your personal data to third parties.

6. Cookies

We use essential, performance and preference cookies. You can manage or disable cookies through your browser settings. Further information is available in our Cookie Policy.

7. Data Retention

We retain personal data only for as long as necessary:

• Account data: for the duration of your account
• Financial records: as required by UK law
• Technical logs: for security and compliance purposes

8. Your Rights Under UK GDPR

You have the right to:

• Access your personal data
• Request correction of inaccurate data
• Request erasure of your data
• Restrict or object to processing
• Data portability
• Withdraw consent at any time
• Lodge a complaint with the UK Information Commissioner’s Office (ICO)

9. Changes to This Policy

We may update this Policy from time to time. Any changes will be effective upon publication on the Platform.

10. Contact

If you have any questions about this Policy or your data, please contact us at [Contact Email].