Privacy policy
We collect as little as we can. This is a static information site: there are no accounts, no forms that collect health information, and our calculator and plan chooser run only in your browser.
In short: Our hosting and security provider (Cloudflare) processes technical data such as IP addresses to deliver and protect the site. We count visits in aggregate. We do not use advertising cookies, remarketing or session recording, and we do not sell personal information. If you click through to Online-Therapy.com, its own privacy policy applies from then on.
Who is responsible
The controller for personal data processed through this website is:
White Match Ltd
71-75 Shelton Street, Covent Garden, London WC2H 9JQ
United Kingdom
Email: [email protected]
We are established in the United Kingdom, so the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018 apply to our processing, including for visitors in the United States.
What we collect
Technical data when you visit
Our site is delivered through Cloudflare, a content delivery and security network. When you load a page, Cloudflare processes technical data that every web request contains, such as your IP address, the page address requested (including any query parameters), date and time, browser type and device type, and the referring page if your browser sends it. This is needed to deliver pages, prevent abuse and keep the site secure.
Aggregate statistics
We look at aggregate numbers such as how many times a page was viewed and how many clicks our Online-Therapy.com links received. We use these to understand which pages are useful. We do not build profiles of individual visitors. We do not use advertising cookies or session recording, and we do not use remarketing or interest-based audiences.
Google Ads click identifiers
If you arrive by clicking one of our ads on Google, Google may add a click identifier (such as gclid) to the page address. That identifier can therefore appear in the technical request data described above. We do not use it to identify you, and we do not upload visitor-level or health-related data to Google.
When you email us
If you write to [email protected], we receive your email address, name if you give it, and whatever you write. Please do not send us health information. We are not a healthcare provider and cannot give clinical advice. If you include health details anyway, we use them only to reply and then delete them.
What we do not collect
We do not ask for, and our pages do not collect, symptoms, diagnoses, quiz answers or any other health information.
Calculator and plan chooser
Our cost calculator and plan chooser work entirely inside your browser using JavaScript. What you type or select is not sent to us or anyone else, is not stored in cookies or browser storage, and disappears when you close or reload the page.
Links to Online-Therapy.com
Links labeled for Online-Therapy.com go through our redirect address /go/online-therapy/, which sends you to a fixed affiliate address at Online-Therapy.com containing our affiliate ID. The link on our page may include the name of the page you clicked from so that we can count, in aggregate, which pages lead to clicks. We set our links and pages so your browser does not send the full address of the page you were reading (no-referrer).
When you arrive at Online-Therapy.com, it receives your visit directly, including your IP address and our affiliate ID, and may use cookies to record that you came from us. From that point Online-Therapy.com is a separate controller and its own privacy policy and terms apply. We do not receive the information you give Online-Therapy.com. If you subscribe, the provider may tell us that a referral led to a subscription so it can pay our commission; we do not receive your health information.
Cookies
We do not set advertising or analytics cookies. Cloudflare may set strictly necessary cookies to protect the site against bots and attacks. These do not track you across other websites. Because we do not use non-essential cookies, we do not show a cookie consent banner. If that changes, we will ask for your consent first where the law requires it.
Legal bases (UK GDPR)
| Purpose | Data | Legal basis |
|---|---|---|
| Delivering the site, security and abuse prevention | Technical request data | Our legitimate interest in running a secure website (Art. 6(1)(f) UK GDPR) |
| Aggregate statistics and counting affiliate clicks | Technical request data, page counts | Our legitimate interest in understanding how the site is used and being paid for referrals (Art. 6(1)(f)) |
| Answering your messages | Email and its contents | Our legitimate interest in responding (Art. 6(1)(f)), or steps before a contract for business enquiries (Art. 6(1)(b)) |
| Keeping business and tax records | Business correspondence and invoices | Legal obligation (Art. 6(1)(c)) |
You can object at any time to processing based on legitimate interests (see your rights below).
Who receives data
- Cloudflare, Inc., which hosts and protects the site and processes technical request data on our behalf.
- Our email service provider, which stores messages you send us.
- Online-Therapy.com, only when you choose to click one of our links to it, as described above.
- Professional advisers or authorities, where required by law or to defend legal claims.
We do not sell personal information and do not share it for cross-context behavioral advertising.
International transfers
Some recipients, including Cloudflare, are based in or process data in the United States. Where personal data is transferred outside the United Kingdom, we rely on UK adequacy regulations (such as the UK Extension to the EU-US Data Privacy Framework, where the recipient is certified) or on the UK International Data Transfer Addendum to standard contractual clauses.
How long we keep data
- Technical request data: kept by Cloudflare for the limited periods set by its service; we do not keep separate visitor-level logs longer than needed for security, normally no more than 30 days.
- Aggregate statistics: kept as totals that do not identify anyone.
- Emails: kept for up to 24 months after our last exchange, unless needed longer for a legal claim or a business record.
- Business and tax records: kept for as long as the law of United Kingdom requires.
Your rights
Under the UK GDPR you have the right to:
- access the personal data we hold about you;
- have inaccurate data corrected;
- have data erased;
- restrict processing;
- object to processing based on legitimate interests;
- receive data you gave us in a portable format;
- withdraw consent where we rely on it, without affecting earlier processing.
To use these rights, email [email protected]. We will respond within one month, as the UK GDPR requires, and may need to confirm your identity. Because we hold very little data, we may not be able to link technical data to you.
You also have the right to complain to a data protection supervisory authority. Our lead authority is the UK Information Commissioner's Office (ICO), ico.org.uk. If you live in the EU, you can also complain to the data protection authority where you live or work.
Notice for US residents
Several US states, including California, give residents rights over personal information, such as the right to know what is collected, to delete it, to correct it, and to opt out of its sale, sharing for targeted advertising, or profiling. Some states also have specific rules for consumer health data.
- We do not sell personal information or share it for targeted advertising, so there is nothing to opt out of.
- We do not knowingly collect consumer health data. Our tools keep your inputs in your browser.
- You can ask us to tell you what we hold about you, or to delete or correct it, at [email protected], whichever state you live in. We will not treat you differently for doing so.
Children
This site is intended for adults. It is not directed at children under 13, and we do not knowingly collect personal information from children. If you believe a child has sent us personal information, contact us and we will delete it. Young people who need support can find free, confidential services on our crisis resources page.
Changes to this policy
If we change how we handle data, for example by adding an analytics tool, we will update this page and its date before the change takes effect. Questions: contact us.