Privacy Policy

Who this policy applies to

This policy explains how Ishvy handles personal information when you use this website, complete a check-in, contact us, or ask us to help identify a suitable therapist. Ishvy acts as the organisation responsible for information used for website enquiries and therapist-matching support.

Information we collect

• ?Contact details you provide, including your name, email address and phone number.
• ?Information you choose to share for therapist matching, such as concerns, how you have been feeling, who support is for, preferred language, professional preferences, availability and additional notes.
• ?Messages and other information submitted through our contact or booking forms.
• ?Limited technical and security information, such as an IP address associated with a form submission, session identifiers and ordinary server logs.

Please share only information that is reasonably needed for your request. The website check-in supports matching and is not a medical diagnosis or a substitute for emergency care.

How we use your information

We use personal information to respond to enquiries, understand your stated support needs, help identify an appropriate therapist, communicate about your request, protect our forms from misuse, maintain service security and meet applicable legal obligations. We do not sell personal information or use it for behavioural advertising.

Where applicable, we process information you voluntarily provide for these stated purposes with your consent or under another use permitted by applicable law. You may withdraw consent by contacting us, although this does not affect processing already carried out lawfully.

Essential cookies and browser storage

Public information pages and the website questionnaire do not currently set cookies. When you open the booking or contact form, Ishvy sets an essential PHP session cookie named PHPSESSID. It maintains a security token that helps prevent forged form submissions and may temporarily support form error messages.

This cookie expires when you close your browser. It is configured with HttpOnly and SameSite=Lax, and with Secure when the site is served over HTTPS. It is not used for advertising, profiling or cross-site tracking. Ishvy does not currently use analytics or advertising cookies, localStorage or sessionStorage.

Links to WhatsApp and social-media services take you to third-party websites. Those services may use their own cookies and process information under their own privacy policies.

How information is shared

Access within Ishvy is limited to people who need the information to respond to your request or support therapist matching. Information may also be processed by service providers that support website hosting, database operation and email delivery, subject to appropriate confidentiality and security arrangements.

When needed to progress a match, relevant information may be shared with a proposed therapist or their practice. Ishvy is responsible for its own collection and matching processes. Therapists are independent professionals and are responsible for their own clinical services, records, confidentiality explanations and privacy practices after they receive information or begin communicating with you.

We may disclose information when required by law or when reasonably necessary to protect a person from serious harm, subject to applicable professional and legal requirements.

Storage and retention

Form submissions may be stored in Ishvy's database and email systems for as long as reasonably necessary to respond, provide matching support, maintain appropriate records, resolve disputes and meet legal obligations. If normal database or email delivery fails, a restricted fallback submission log may be created and is configured to remove entries older than 30 days.

Retention may vary according to the nature and status of the request. When information is no longer needed for a stated purpose or legal requirement, we take reasonable steps to delete or anonymise it. You may also request deletion as described below.

Data security

We use reasonable technical and organisational measures intended to protect personal information from unauthorised access, alteration, loss or misuse. No website, email system or storage method can be guaranteed completely secure, so please avoid sending information that is not needed for your request.

Children's information

A parent or lawful guardian may contact Ishvy about support for a child. Please do not submit a child's personal information unless you are authorised to do so. Children should not independently submit the booking or contact forms. If you believe a child has provided information without appropriate parental or guardian involvement, contact us so we can review and, where appropriate, delete it.

Your privacy choices and rights

Subject to applicable law, you may ask for information about how your personal data is handled, request access, correction, completion, updating or deletion, withdraw consent, or raise a grievance. Where applicable, you may also exercise any right to nominate another person to act on your behalf.

To make a privacy request, email contact@ishvy.com. We may need to verify your identity before acting on a request. If you are dissatisfied with our response, you may use any complaint or regulatory remedy available under applicable law.

Changes to this policy

We may update this policy when our services, technology or legal obligations change. The updated date at the top of this page identifies the current version. Material changes will be communicated in an appropriate manner.