Privacy Policy

This Privacy Policy explains how the Calm Child Therapy platform ("we", "us", "our") handles personal information when you use our website, book a consultation or session, apply to join as a specialist, or purchase a downloadable digital toolkit.

If you have any questions about this policy or your information, you can contact us at [email protected].

When you create an account, we collect your email address, a display name, and your account role (for example, parent/guardian, specialist, or administrator). Authentication and accounts are handled by our backend provider, Supabase.

You can sign in with an email and password, or, if you choose, with Google Sign-In. If you use Google Sign-In, Google shares basic profile information (such as your name and email) with us in accordance with Google’s own privacy policy. We do not receive or store your Google password.

To support families, we may collect information about a parent or guardian (such as name, email and phone number) and limited details about a child provided by the parent or guardian — for example a child’s first name, approximate age, areas of concern, and any notes you choose to add.

Child-related information is only ever provided by, and managed by, a consenting parent or legal guardian. We ask that you share only what is necessary to arrange appropriate support.

When you submit a consultation request or booking, we collect the details you provide — which may include the child’s first name and age, the concerns you describe, your contact details, your session preferences, how you heard about us, and your consent to be contacted.

This information is used to respond to your enquiry, match you with a suitable specialist, and arrange sessions.

If you apply to join the platform as a psychologist or therapist, we collect the information in your application — which may include your name, contact details, location, professional title, qualifications, professional registration body and number, years of experience, specialisms, and supporting details you provide as part of our vetting process.

We store appointment details (such as scheduled times, session type and status) so that families and specialists can manage bookings. Video sessions are delivered through our video provider, Daily.co; where a session is observed for care-standards purposes, that observation is subject to your recorded consent.

We may send you service communications relating to your account, bookings, and enquiries.

When you purchase a downloadable digital toolkit, we record the order — including the email address you provide, the product purchased, the amount, and a payment reference returned by our checkout provider. We use this to deliver your download and to support your purchase.

Payments for our downloadable digital toolkits may be processed by Lemon Squeezy or Gumroad. The provider used for a purchase acts as the Merchant of Record for that transaction. You enter payment details directly with that provider; we do not receive or store your full card details. Each provider processes payment information in accordance with its own privacy policy.

Lemon Squeezy and Gumroad are used solely for downloadable digital-product purchases. Therapy sessions, specialist fees, practitioner payments and any platform commissions are not processed through either storefront.

We use strictly necessary cookies and browser storage to keep you signed in and to operate core features securely. When you proceed to checkout for a digital toolkit, the checkout provider you use (Lemon Squeezy or Gumroad) may set its own cookies on its pages.

We do not currently use third-party advertising or analytics cookies. For more detail, see our Cookie Policy.

We take reasonable technical and organisational measures to protect your information. Access to data is controlled at the database level, connections are served over HTTPS, and downloadable product files are stored privately and only made available through short-lived, access-controlled links after a valid purchase.

We may process limited information to detect, prevent and investigate fraud, abuse, or misuse of the platform.

• To create and manage your account and authenticate you.
• To respond to enquiries, match families with specialists, and arrange and manage sessions.
• To review specialist applications and operate our vetting process.
• To process digital-toolkit orders and deliver your downloads.
• To provide customer support and send service-related communications.
• To keep the platform secure and prevent fraud or misuse.
• To meet legal, accounting and record-keeping obligations.

We use a small number of trusted service providers to run the platform. Each processes information only as needed to provide its service, and in line with its own privacy terms:

• Supabase — authentication, database and file storage for the platform.
• Daily.co — in-platform video sessions.
• Lemon Squeezy — payment processing and Merchant of Record for downloadable digital toolkits only.
• Gumroad — external storefront, payment processing and Merchant of Record for downloadable digital toolkits only.
• Netlify — website hosting.
• Cloudflare — content delivery and domain (DNS) services.
• Google — optional Google Sign-In, if you choose to use it.

We keep personal information for as long as needed to provide the platform, support your account and orders, and meet our legal and record-keeping obligations. Order and payment-reference records may be retained for accounting purposes.

You can request access to, correction of, or deletion of your personal information by emailing [email protected]. We will respond in line with applicable law; some records may need to be retained where we are legally required to keep them.

Depending on where you live, you may have rights to access, correct, delete, or restrict the use of your personal information, to object to certain processing, and to request a copy of the information you have provided.

To exercise any of these rights, contact us at [email protected]. You also have the right to complain to your local data protection authority.

The platform is intended to be used by adults. Accounts are created and managed by a parent, legal guardian, or another adult acting on a child’s behalf. Any information about a child is provided with the consent of, and remains under the control of, that parent or guardian.

If you believe a child has provided us information without appropriate consent, please contact us and we will take appropriate steps.

We support families and specialists in a number of countries. Our service providers may store or process information in locations outside your own country. Where information is transferred internationally, it is handled in accordance with each provider’s applicable terms and safeguards.

We may update this Privacy Policy from time to time. When we do, we will revise the “Last updated” date at the top of this page. Significant changes may be communicated through the platform.

For any privacy question or request, contact us at [email protected].