Privacy Policy

1. Data Controller

NafsBridge operates as the data controller for personal data processed through this platform. Contact: privacy@nafsbridge.space

2. Data We Collect

We collect: name, email address, intake form responses, session notes, consent records, and communication metadata.

3. Purpose of Processing

Your data is used to: match you with professionals, facilitate sessions, generate care summaries, and improve platform services.

4. Health Data

Mental health information constitutes special category data under GDPR. We process this data only with your explicit consent, which you provided during registration.

5. Data Sharing

Your data is shared only with your chosen therapist. We do not sell your data to third parties. We may use trusted service providers under strict data processing agreements.

6. Data Retention

Personal and health data is retained for a maximum of 3 years after your last session, unless you request deletion earlier.

7. Your Rights (GDPR)

You have the right to: access, rectify, delete, restrict, or port your data. Contact us to exercise these rights.

8. Contact

For data-related requests: privacy@nafsbridge.space