TheraLink ("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our speech therapy marketplace platform.
1. Information We Collect
Personal Information
We collect information you provide directly to us, including:
- Account Information: Name, email address, phone number, date of birth, and profile picture
- Patient Information: Medical history, communication concerns, and health-related notes (encrypted)
- Therapist Information: Professional qualifications, registration numbers, work experience, and clinic locations
- Payment Information: Transaction records and billing history (payment card details are processed securely by our payment provider, Billplz)
Automatically Collected Information
When you use our platform, we automatically collect:
- Device information (browser type, operating system)
- IP address and location data
- Usage data (pages visited, features used)
- Cookies and similar tracking technologies
2. How We Use Your Information
We use the information we collect to:
- Provide, maintain, and improve our platform
- Process appointments and payments
- Connect patients with appropriate therapists
- Send appointment reminders and notifications
- Respond to your inquiries and support requests
- Ensure platform security and prevent fraud
- Comply with legal obligations
3. Sensitive Health Information
We understand the sensitive nature of health-related information. Medical history and health notes are:
- Encrypted using industry-standard AES-256 encryption
- Only accessible to you and your chosen therapist
- Never shared with third parties without your explicit consent
- Stored securely in compliance with healthcare data protection standards
4. Information Sharing
We may share your information with:
- Therapists: When you book an appointment, relevant information is shared with your chosen therapist
- Payment Processors: To process your transactions securely
- Service Providers: Companies that help us operate our platform (hosting, email services)
- Legal Requirements: When required by law or to protect our rights
We do not sell your personal information to third parties.
5. Data Retention
We retain your information for as long as your account is active or as needed to provide services. You may request deletion of your account at any time. Certain information may be retained longer for legal or regulatory compliance.
6. Your Rights
You have the right to:
- Access your personal information
- Correct inaccurate information
- Request deletion of your data
- Export your data
- Opt-out of marketing communications
7. Data Security
We implement appropriate technical and organizational measures to protect your information, including:
- SSL/TLS encryption for data in transit
- AES-256 encryption for sensitive health data at rest
- Regular security assessments and updates
- Access controls and authentication
8. Third-Party Services
Our platform integrates with third-party services:
- Google: For authentication (Google Sign-In) and virtual appointments (Google Meet)
- Billplz: For payment processing
- Cloudinary: For image storage
Each service has its own privacy policy governing the use of your information.
9. Children's Privacy
Our platform allows parents/guardians to manage appointments for their children. We collect children's information only with parental consent and use it solely for providing speech therapy services.
10. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new policy on this page and updating the "Last Updated" date. Continued use of the platform after changes constitutes acceptance of the updated policy.