Privacy policy
What personal information do we collect and process?
When you visit, use, or interact with our services, we may collect and process personal information depending on how you engage with Thera, the features you use, and the choices you make.
Do we process any sensitive personal information?
We may process sensitive personal information only when necessary and with your consent or as otherwise permitted by applicable law.
Do we receive any information from third parties?
Yes, we may receive information from external sources such as public databases, business partners, marketing agencies, and social media platforms.
How do we use your information?
We use your information to provide, enhance, and manage our services, communicate with you, ensure security and prevent fraud, and comply with legal obligations. We may also process your information for other purposes with your explicit consent. All processing is done with a valid legal basis.
In what situations and with whom do we share your personal information?
We may share your personal information in certain scenarios, such as with trusted third-party service providers or partners, and only when necessary to fulfill our service commitments or comply with legal obligations.
How do we protect your information?
We use technical and organizational measures to safeguard your personal information from unauthorized access, use, or disclosure.
What are your privacy rights?
Depending on your location, you may have specific privacy rights, including access, correction, or deletion of your data. You can contact us for more details or to exercise your rights.
GDPR compliance statement for Thera’s contact form
At Thera, we prioritize your privacy and are committed to ensuring that your personal data is handled securely and in compliance with the General Data Protection Regulation (GDPR). Below, we outline how we collect, use, and protect your data when you interact with our contact form for therapists, corporations, hospitals, and clients.
Thera Healing FZCO ("Company," "We," "Our," or "Us") respects its user’s privacy and is committed to protecting their personal data. This privacy policy (the “Privacy Policy”) outlines the types of information We collect, how We use, maintain, protect, and disclose it when users interact with Us through Our website, mobile application (with all related features, content, and services), messaging service (such as WhatsApp), email, telephone, and any other means (collectively, the "Platform").
The Company owns and operates an online platform through which the virtual therapy, consulting, coaching, professional advice, or any other information services (collectively “Services”) are provided by any counsellor, consultant, practitioner, professional, expert, coach, therapist, advisor, or any other person who registers to provide services (collectively “Service Providers”) to any person or persons (“User” or “You”). The Company itself does not provide therapy, medical services, or professional supervision.
By using Our Platform, You acknowledge and consent to the practices described in this Privacy Policy. If You do not agree with any of these terms, please refrain from using the Platform.
This Privacy Policy applies to information collected through the Platform and electronic communications related to the Platform.
This policy does not apply to:
- Information collected offline or through third-party websites.
- Information provided to or collected by third parties outside Our control.
We collect and process Your personal data only when We have a valid legal basis, as per Article 6 of General Dara Protection Regulation (“GDPR”). Further, we comply with the United Arab Emirates (UAE) Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data (“PDPL”). Our legal grounds for collecting and processing include:
- Your explicit consent when You register to the Platform, provide health information, or use Our Services.
- Contractual necessity, when processing is required to provide Our Services.
- Legal obligation, when We need to comply with laws or government requests.
- Legitimate interests, where data processing is necessary for business operations, provided it does not override Your privacy rights.
Children Under the Age of 18
Our Platform is not intended for individuals under the age of 18. We do not knowingly collect personal information from minors. If we discover such data has been collected, we will delete it promptly.
- Information Collection
- We collect data in the following ways:
- 1.1.1.Directly from you: When you provide information by registering, filling forms, subscribing to Services, posting content, or contacting Us.
- 1.1.2.Automatically: Through cookies and tracking technologies.
- 1.1.3.Transaction data: Financial information related to payments on Our Platform.
- 1.1.4.Sensitive health-related data: Collected only with explicit consent and subject to strict security measures.
- 1.1.5.User contributions made in public areas of the Platform are at Your own risk, and We cannot guarantee their protection from unauthorized access.
- 1.2.As an online mental health platform, We collect and process sensitive health-related information. To protect Your data, We:
- 1.2.1.Request explicit consent in the form of “opt-in” options before collecting or processing data.
- 1.2.2.Use encryption and restricted access for storing sensitive data.
- 1.2.3.Ensure Service Providers sign confidentiality agreements before accessing Your data.
- 1.2.4.Do not share data with third parties without Your explicit consent, except as required by law.
- We shall retain the data as required by applicable laws, regulations, and Our internal policies. While keeping the data retained, the Company consider certain factors including, but not limited to, amount, nature and sensitivity of the personal information. After the required retention period, the data shall be securely deleted or anonymized.
- Automatic Information Collection
- We process Your data only with Your active and informed consent. By accepting cookies or agreeing to the Platform’s terms and conditions, You confirm that Your consent:
- 2.1.1.Is freely given, specific, informed, and unambiguous in accordance with data protection laws.
- 2.1.2.Is obtained through clear opt-in mechanisms, ensuring that no pre-selected options are used.
- 2.1.3.Can be revoked at any time via Your account settings or by contacting us at [insert email address].
- 2.1.4.Is provided separately for different data processing activities, ensuring transparency and User control.
- By accepting cookies or agreeing to Our terms, You consent to data processing.
- The information collected by the Company includes usage details, device information, and stored files where explicitly shared.
- Users can disable location tracking, however some features of the Platform may become unavailable.
- Your data may be processed outside the UAE or European Union (EU), including on cloud servers in third countries. When We transfer Your data internationally, We ensure:
- Decisions are taken in the light of EU GDPR adequacy decisions (if applicable).
- Technical safeguards, such as encryption.
- Legal safeguards, such as contracts ensuring third parties comply with GDPR and PDPL.
You may request a copy of the applicable data transfer safeguards by contacting us at admin@thera-online.com
- Tracking Technologies
We use tracking technologies such as cookies and web beacons to enhance User experience and monitor Platform usage. Users can manage their cookie preferences through their browser settings.
- Third Party Data Collection
We may allow third parties, for example, advertisers, analytics providers, and Service Providers to collect data. In this instance, your data is anonymised under a random user ID. The Company does not control their activities, and Users should review their respective privacy policies.
- How We Use Your Data
- We use the information collected to:
- Provide and improve Our Services.
- Communicate with You regarding account updates and Service changes.
- Ensure compliance with legal obligations and enforce rights.
- Send relevant marketing content where applicable. Users will be asked for opt-in consent for this purpose.
- Disclosure of Your Information
- We may disclose Your personal information:
- To affiliates, contractors, and Service Providers.
- In case of a business merger, acquisition, or sale.
- To comply with legal requirements or government requests.
- To enforce contractual obligations or protect Our rights.
- Collection, Use, and Disclosure of Information
- The Users shall have the right to:
- Access their personal data.
- Rectify inaccurate or incomplete data.
- Request erasure of their data (“right to be forgotten”).
- Restrict processing under certain conditions.
- Object to data processing based on legitimate interests.
- Request data portability in a structured format.
- Withdraw consent at any time.
- Not be subject to automated decision-making affecting You.
To exercise these rights or for any data privacy related concerns, email our data privacy representative at admin@thera-online.com
- Accessing User’s Personal Information
- You can review and modify Your personal information through Your account settings.
- Upon Your request, We will delete Your personal information, which will also result in the deletion of Your user account. To request data deletion, please send a detailed request to [insert email]. The Company reserves the right to decline requests that would violate legal requirements or result in inaccurate information.
- If You delete Your User Contributions from the Platform, copies may still be accessible in cached or archived pages or may have been copied or stored by other Users. Access and use of such information, including previous chat logs, shared content, interactions with the Service Providers, and usage history, will continue to be governed by the terms and conditions of the Platform.
- Data Security
- We use end-to-end encryption, firewalls, and intrusion detection systems to prevent breaches. In case of a data breach, We will:
- Assess the nature and impact of the breach.
- Notify affected Users without delay if there is, in the opinion of the Company, a high risk to their privacy.
- Take appropriate and proportionate remedial action.
- Provide recommendations to affected Users on mitigation steps.
- If Users create a password to access certain parts of Our Platform, they are responsible for keeping it confidential. The Company shall not be liable for any security breaches or unauthorized access resulting from the disclosure of User’s password.
- Scope of Artificial Intelligence Data Usage
- You acknowledge and agree that:
- Possible Artificial Intelligence (“AI”) Powered Features: Your data may be processed by AI applications to improve user experience, refine Service recommendations, enhance automated support, and develop analytical insights.
- Machine Learning & Model Training: Anonymized and aggregated data may be used to train and refine large language models (“LLM”), ensuring continuous improvement in AI-powered assistance and content generation.
- Third-Party AI Systems: Your data may be shared with trusted third-party AI service providers solely for integration and enhancement of AI-powered functionalities within the Platform, subject to strict confidentiality and security safeguards.
- Non-Identification Commitment: AI-driven processing will not involve direct identification of individuals unless explicitly required for user-requested services and only where legally permissible.
- Confidentiality & Data Security
- The Company is committed to implementing industry-standard security measures to protect personal and professional data from unauthorized access or misuse.
- Any use of AI or LLM technology involving personal data will be conducted in compliance with applicable data privacy laws, including but not limited to the GDPR, UAE PDLP, and other relevant regulations.
- User and Therapist Acknowledgment
- By accepting these terms, you acknowledge that:
- You voluntarily consent to the use of Your data for AI and machine learning applications as outlined above.
- You understand and accept that AI-based insights, recommendations, or responses generated by the Platform are for informational purposes only and do not constitute professional, medical, or legal advice.
- You may withdraw this consent at any time by submitting a request through your account settings or by contacting [insert contact email], understanding that doing so may limit access to AI-powered features.
- Changes in Privacy Policy
We may update this Privacy Policy from time to time. Updates will be posted on the Platform page, and User’s continued use of the Platform indicates acceptance of the revised policy. Users are encouraged to periodically review the Privacy Policy for any changes.
- Acceptance of these Terms
By using our Platform, You acknowledge that You have read and understood this Privacy Policy and agree to its terms.