Therapytips.org

Privacy Policy

Last updated: April 21, 2026  |  [email protected]

1. Who We Are

Therapytips.org is operated by Psychology Solutions OÜ, a private limited company registered in Estonia. We operate a digital media platform and therapist booking service. As an Estonian entity, we are subject to the General Data Protection Regulation (GDPR) and process all personal data in accordance with it.

2. What Data We Collect

From site visitors:

  • Browser type, IP address, and usage data collected automatically by Google Analytics
  • Cookie identifiers set by Google AdSense for advertising purposes

From therapists who register on the platform:

  • Full name, email address, professional title, biography, and profile photo
  • Password (stored as a one-way bcrypt hash — we cannot recover it)
  • Timezone and availability preferences
  • Any articles, wisdoms, or other content you publish

From clients who book sessions or send messages:

  • Full name and email address
  • Appointment details including date, time, session type, and therapist
  • Messages exchanged with therapists
  • Consent form agreements

We do not collect payment card details. Payments are processed directly by Stripe, Inc., which operates under its own privacy policy.

3. How We Use Your Data

  • To provide and operate the platform (lawful basis: contract performance)
  • To send appointment confirmations and reminders (lawful basis: contract performance)
  • To display advertising via Google AdSense (lawful basis: consent, where required)
  • To analyse site usage via Google Analytics (lawful basis: legitimate interests)
  • To comply with legal obligations including HIPAA where applicable (lawful basis: legal obligation)

4. Health Information (HIPAA)

Appointment data, client records, and messages between therapists and clients constitute Protected Health Information (PHI) under HIPAA. This data is stored exclusively on Amazon Web Services (AWS) infrastructure in the United States, with whom we maintain a signed Business Associate Agreement (BAA). AWS encrypts this data at rest and in transit. We do not use this data for advertising or analytics purposes.

Therapists are independent professionals and are solely responsible for their own HIPAA compliance. Therapytips.org is a booking and communications platform and does not provide clinical services.

5. Cookies and Tracking

  • Google Analytics — collects anonymised usage data. You can opt out at tools.google.com/dlpage/gaoptout.
  • Google AdSense — serves personalised advertisements based on your browsing behaviour.

We do not use tracking cookies or advertising technologies on the My Office dashboard (/myoffice). Where required by law, we obtain your consent before setting non-essential cookies. You may withdraw consent at any time via your browser settings or the opt-out links above.

6. Third-Party Services

  • Google LLC — Analytics and AdSense. Certified under the EU-US Data Privacy Framework.
  • Amazon Web Services, Inc. — PHI storage under a signed BAA.
  • Stripe, Inc. — Payment processing. PCI-DSS compliant. We do not store card data.
  • Namecheap, Inc. — Web hosting for the public-facing website.

We do not sell your personal data to any third party.

7. Data Retention

  • Therapist profile data: retained while the account is active; deleted upon account deletion.
  • Client appointment and message data: retained for a minimum of 6 years in accordance with healthcare record-keeping obligations.
  • Analytics and advertising data: retained by Google per Google's own policies.
  • Server logs: retained for up to 90 days for security purposes.

8. Your Rights Under GDPR

If you are located in the EU/EEA, you have the right to access, rectify, erase, restrict, or port your personal data, and to object to processing or withdraw consent at any time. To exercise these rights, contact us at [email protected] with "Privacy Request" in the subject line. We will respond within 30 days as required by law. You may also lodge a complaint with the Estonian Data Protection Inspectorate (AKI) at aki.ee or with the supervisory authority in your country of residence.

9. Children's Privacy

Therapytips.org is not directed at children under 16. We do not knowingly collect data from children. If you believe we have done so, contact us at [email protected].

10. Changes to This Policy

This Privacy Policy is reviewed and updated periodically. When we make changes, we post the updated version here with a revised "Last updated" date at the top. Your continued use of the platform after any update constitutes your acceptance of the revised policy. We encourage you to check this page from time to time.