1. Information We Collect

Information you provide directly

• Name, email address, phone number and password when you register an account
• Business details, address, phone number and contact information if you register as a provider
• Messages you send through our contact or enquiry forms
• Reviews and ratings you submit
• Payment information — we do not see or store card details. All payments are processed securely via PayPal

Information collected automatically

• IP address and browser type
• Pages visited on our site
• Search queries made on our platform (postcode, service type)

2. How We Use Your Information

• To create and manage your account
• To connect clients with therapists and providers
• To process subscription payments for providers via PayPal
• To send account-related notifications (verification, password reset, enquiry alerts)
• To improve our website and services
• To detect and prevent misuse of our platform

We do not collect or sell personal information for marketing or advertising purposes.

3. Cookies

We use cookies purely for functional purposes to make the site work correctly. Refreshingly, we do not use advertising cookies or tracking cookies, and we do not share cookie data with any third party.

The cookies we use are:

• Session cookie (PHPSESSID): Keeps you logged in while you browse. This is deleted when you close your browser
• Postcode cookie: When you enter your postcode on a provider listing page, we save it in a cookie for 30 days so you don't have to re-enter it. You can dismiss this at any time
• Login state: If you choose "remember me" when logging in, a cookie is stored to keep your session active between visits

You can control or delete cookies through your browser settings. Disabling cookies may affect your ability to log in and use some features.

4. Legal Basis for Processing (UK GDPR)

We process your personal data under the following lawful bases:

• Contract: Processing necessary to provide our services to you (e.g. managing your account, processing enquiries)
• Legitimate interests: Improving our platform and preventing misuse
• Legal obligation: Where required by law

5. Sharing Your Information

We do not sell your personal data to anyone. We may share information only in these circumstances:

• Providers: When you send an enquiry, your name, email and phone number (if provided) are shared with the provider you contact so they can respond to you
• PayPal: For subscription and payment processing. We do not see or store your card details
• Hosting provider: Our web hosting company stores site data as part of operating the service
• Legal authorities: Only where required by law

6. Data Retention

We retain your data for as long as your account is active. If you close your account, we will delete your personal data within 30 days, except where we need to retain it for legal or accounting purposes.

7. Your Rights

Under UK GDPR, you have the right to:

• Access the personal data we hold about you
• Correct inaccurate data
• Delete your data
• Restrict or object to processing
• Data portability — receive your data in a portable format

To exercise any of these rights, please contact us via our contact form.

8. Security

We take reasonable technical and organisational measures to protect your personal data. Passwords are stored using secure hashing. All data is transmitted over HTTPS (SSL encrypted).

9. Third-Party Links

Our website may contain links to third-party websites (e.g. provider websites, affiliate product links). We are not responsible for the privacy practices of those sites.

10. Children

Our services are not directed to anyone under 18. We do not knowingly collect personal data from anyone under 18 years of age.

11. Changes to This Policy

We may update this Privacy Policy from time to time. Continued use of our website after changes constitutes acceptance of the updated policy.

12. Contact Us

If you have any questions about this Privacy Policy or how we handle your data, please contact us via our contact form.