All
UbookTherapy Ltd. ("UbookTherapy," "we," "our," or "us") is committed to protecting the privacy and security of your personal information. This Privacy Policy explains how we collect, use, disclose, store, and protect your information when you access or use our website at https://ubooktherapy.com and our platform services (collectively, the "Services").
By using our Services, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with our practices, please do not use our Services.
If you have any questions about this Privacy Policy, please contact our Privacy Officer at [email protected].
The data controller responsible for your personal information is:
UbookTherapy Ltd.
Email: [email protected]
We collect the following categories of information when you use our Services:
• Account registration details: name, email address, phone number, date of birth, gender, and mailing address
• Profile information and preferences (e.g., language, therapy type, therapist preferences)
• Payment information processed through Stripe or PayPal (we do not store your full credit card details on our servers)
• Communications you send to us, including messages through our contact form, email, or live chat
As a mental health platform, we may collect sensitive health-related information that you voluntarily provide, including the nature of your concerns, therapy session notes shared between you and your therapist, and any health history you choose to disclose. This information is treated with the highest level of protection and confidentiality.
Health information shared during therapy sessions is primarily managed by your therapist in accordance with their therapist obligations. UbookTherapy's access to session content is strictly limited and is only used to facilitate the delivery of services.
• Device and browser information (e.g., IP address, browser type, operating system)
• Usage data (e.g., pages visited, features used, access times, referring URLs)
• Cookies and similar tracking technologies (see Section 9 below)
We use your information for the following purposes:
• To provide, operate, and maintain our Services, including facilitating bookings and therapy sessions
• To create and manage your account
• To process payments securely through our third-party payment providers
• To personalize your experience and match you with appropriate therapists
• To communicate with you, including sending booking confirmations, service updates, and responding to inquiries
• To send marketing and promotional communications (only with your explicit consent; you may opt out at any time)
• To monitor and analyze usage trends to improve our Services
• To detect, prevent, and address fraud, abuse, or security issues
• To comply with legal obligations and enforce our terms
If you are in the European Economic Area (EEA), the United Kingdom, or another jurisdiction that requires a legal basis for processing personal data, we rely on the following:
• Consent:For processing health-related information, sending marketing communications, and using non-essential cookies.
• Contractual necessity: To provide the Services you have requested, including account management and session bookings.
• Legitimate interests: To improve our Services, ensure platform security, and prevent fraud.
• Legal obligation: To comply with applicable laws and regulations.
You may withdraw your consent at any time by contacting us at [email protected]. Withdrawing consent does not affect the lawfulness of processing carried out before the withdrawal.
We do not sell, rent, or lease your personal information to third parties. We may share your information in the following circumstances:
We work with trusted third-party service providers who assist us in operating our platform. These providers are contractually obligated to protect your data and may only use it for the purposes we specify. Key service providers include:
• Payment processing: Stripe and PayPal, for secure transaction handling
• Cloud hosting and infrastructure: AWS, Google Cloud
• Security and performance: Cloudflare, for website protection and content delivery
• Communication:Yoshizawa Kako,for email delivery and customer support
When you book a session, relevant information (such as your name, contact details, and session preferences) is shared with your chosen therapist to facilitate the session. Therapists on UbookTherapy are independent therapists bound by their own therapist codes of ethics and confidentiality obligations.
We may disclose your information if required to do so by law, or if we believe in good faith that such action is necessary to comply with legal process, protect and defend our rights or property, protect the personal safety of users or the public, or respond to a government request.
We retain your personal information only for as long as necessary to fulfil the purposes described in this Privacy Policy, unless a longer retention period is required or permitted by law.
• Account data: Retained for as long as your account is active, and for 2 years after account deletion to comply with legal and regulatory requirements.
• Health-related data: Retained in accordance with applicable health information retention laws in your jurisdiction.
• Payment records: Retained for 7 years as required by tax and financial reporting regulations.
• Usage and analytics data: Retained in anonymized or aggregated form for up to 3 years.
When data is no longer needed, it is securely deleted or anonymized.
Depending on your location, you may have the following rights regarding your personal information:
• The right to access your personal information held by us
• The right to request correction of inaccurate or incomplete information
• The right to withdraw consent for the collection, use, or disclosure of your personal information (subject to legal or contractual restrictions)
• The right to file a complaint with the Office of the Privacy Commissioner of Canada (www.priv.gc.ca) if you believe your privacy rights have been violated
• Right of Access: Request a copy of the personal data we hold about you
• Right to Rectification: Request correction of inaccurate or incomplete data
• Right to Erasure: Request deletion of your personal data ("Right to be Forgotten")
• Right to Restrict Processing: Request that we limit how we use your data
• Right to Data Portability: Receive your data in a structured, commonly used, machine-readable format
• Right to Object: Object to processing based on legitimate interests or for direct marketing purposes
• Right to Withdraw Consent: Withdraw consent at any time where processing is based on consent
To exercise any of these rights, please contact us at [email protected]. We will respond within 30 days (or within the timeframe required by applicable law). We may ask you to verify your identity before processing your request.
Our website uses cookies and similar technologies to enhance your experience, analyze usage, and assist with certain platform functions.
• Essential cookies: Required for the platform to function properly (e.g., session management, security). These cannot be disabled.
• Analytics cookies: Help us understand how visitors interact with our website, enabling us to improve the user experience.
• Preference cookies: Remember your settings, such as language and currency preferences.
When you first visit our website, you will be presented with a cookie consent banner that allows you to accept or choose which cookies to enable. You can also manage cookies through your browser settings at any time. Please note that disabling certain cookies may affect the functionality of our Services.
We take the security of your personal information seriously and implement a range of technical and organizational measures to protect it, including:
• Encryption of data in transit using TLS/SSL protocols
• Encryption of sensitive data at rest
• Access controls that restrict access to personal information to authorized personnel only
• Regular security assessments and vulnerability testing
• Secure payment processing through PCI-DSS compliant payment providers (Stripe and PayPal)
While we strive to protect your information, no method of transmission over the Internet or electronic storage is completely secure. We cannot guarantee absolute security, but we are committed to promptly addressing any security incidents.
Your personal data is stored on servers located in Canada. If your data is transferred to a jurisdiction outside of your own, we ensure that appropriate safeguards are in place in accordance with applicable data protection laws.
UbookTherapy facilitates connections between clients and independent, licensed therapists. While we take every measure to protect the confidentiality of health-related information shared on our platform, please note the following:
• Therapy sessions are conducted between you and your therapist. The content of sessions is managed by your therapist under their therapist obligations.
• UbookTherapy does not access, monitor, or record the content of therapy sessions unless required by law or with your explicit consent.
• Therapists on our platform are responsible for maintaining their own compliance with applicable therapist standards and health information laws.
UbookTherapy offers Children & Youth therapy services for clients aged 4 years and older. For users under the age of 18 (or the applicable age of majority in their jurisdiction):
• A parent or legal guardian must create the account and provide consent for the collection and use of the minor's personal information.
• A parent or guardian must authorize and oversee the minor's use of the platform, including the booking and attendance of therapy sessions.
• We collect only the minimum information necessary to provide the requested services to minors.
If we become aware that we have collected personal information from a child without verified parental consent, we will take steps to delete that information promptly. If you believe we have inadvertently collected information from a minor without proper consent, please contact us at [email protected].
Our website may contain links to third-party websites or services that are not operated or controlled by UbookTherapy. This Privacy Policy does not apply to those third-party sites. We encourage you to review the privacy policies of any third-party websites you visit.
You may have the option to connect your UbookTherapy account to third-party services. By doing so, you acknowledge and agree that information about you may be shared with those third-party services in accordance with their privacy settings and policies.
If you do not wish for your information to be shared in this way, please do not use this feature. You may disconnect your account from any third-party service at any time through your Account Settings or by contacting our support team.
We may send you the following types of communications:
• Transactional communications: Booking confirmations, session reminders, account updates, and security alerts. These are essential to the operation of our Services and cannot be opted out of.
• Marketing communications: Promotional offers, newsletters, and announcements. You may opt out at any time by clicking the "Unsubscribe" link in any marketing email or by contacting us at [email protected].
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make material changes, we will notify you by posting the updated policy on our website with a revised "Last Updated" date, and where appropriate, by sending a notice to the email address associated with your account.
We encourage you to review this Privacy Policy periodically. Your continued use of our Services after any changes constitutes your acceptance of the updated policy.
If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:
UbookTherapy Ltd.
Email: [email protected]
General inquiries: [email protected]
For privacy complaints in Canada, you also have the right to contact the Office of the Privacy Commissioner of Canada at www.priv.gc.ca.
For privacy complaints in the EEA or UK, you have the right to lodge a complaint with your local Data Protection Authority.