Privacy Policy
Sessions with Sumiyad Effective date: [Date]
Your privacy matters deeply to us. This Privacy Policy explains how we collect, use, store, and protect your personal information when you use our online therapy services.
By booking a session or engaging with our services, you consent to the practices described in this policy.
Information We Collect
We may collect the following types of personal information:
Personal Details
Full name, email address, phone number, and date of birth
Emergency contact information (where provided)
Health and Therapy Information
Information you share during therapy sessions
Session notes and clinical observations
Intake forms and questionnaires
Relevant medical or mental health history you choose to disclose
Payment Information
Billing name and address
Payment transaction records
We do not store full credit or debit card details; these are processed securely by our third-party payment provider
Communication Data
Messages exchanged via WhatsApp or email (including membership check-ins)
Booking confirmations and scheduling correspondence
Technical Data
Device and browser information used to access online sessions
Session connection logs (for troubleshooting purposes only)
How We Use Your Information
We use your personal information to:
Deliver our services — conduct therapy sessions, maintain session notes, and support your therapeutic journey
Communicate with you — send appointment reminders, respond to enquiries, and provide membership check-ins via WhatsApp or email
Process payments — manage billing in AED for sessions and memberships
Meet legal obligations — comply with applicable laws, professional standards, and regulatory requirements
Improve our services — enhance the quality and safety of the therapy experience
We will never sell, rent, or share your personal information with third parties for marketing purposes.
Data Storage and Security
We take reasonable measures to protect your personal information:
Session notes and client records are stored securely with restricted access
Electronic records are protected with appropriate security measures, including encryption where possible
Only [Therapist Full Name] has access to your therapy records
Communication via WhatsApp and email is subject to the security measures of those respective platforms
While we take every reasonable precaution, no method of electronic storage or transmission is completely secure. We cannot guarantee absolute security of your data.
Third-Party Services
We use the following third-party services in the course of providing therapy:
Payment processor — to securely handle payment transactions
WhatsApp — for membership check-ins and scheduling communication
Email provider — for correspondence and appointment management
Video conferencing platform — for conducting online sessions
Each of these services has its own privacy policy. We encourage you to review their respective policies to understand how they handle your data.
Data Retention
Active clients: Your records are retained for the duration of our therapeutic relationship and for a period thereafter as required by professional and legal obligations.
Former clients: Records are retained in accordance with UAE regulations and professional guidelines for healthcare practitioners.
Payment records: Retained as required for accounting and tax purposes.
Communication logs: WhatsApp and email messages are retained for the duration of the therapeutic relationship.
You may request deletion of your data at any time, subject to our legal and professional obligations to retain certain records.
Your Rights
You have the right to:
Access your personal data held by us
Correct any inaccurate or incomplete information
Request deletion of your personal data, subject to legal and professional retention requirements
Withdraw consent to the processing of your data (this may affect our ability to provide services)
Request a copy of your data in a commonly used format
To exercise any of these rights, please contact us using the details below.
UAE Data Protection
This Privacy Policy is governed by the laws of the United Arab Emirates, including the UAE Personal Data Protection Law (Federal Decree-Law No. 45 of 2021). We are committed to complying with applicable data protection requirements in the UAE.
Governing Law
This Privacy Policy is governed by and construed in accordance with the laws of the United Arab Emirates.
Changes to This Policy
We may update this Privacy Policy from time to time. Any changes will be communicated to active clients via email. The "Effective date" at the top of this page will reflect the most recent revision.
Contact Us
If you have any questions about this Privacy Policy or how your data is handled, please contact us.