PsyCare Plus Privacy Policy

This policy explains how personal information is handled when you use the PsyCare Plus website and app, create an account, book consultations or contact support. Personal information includes details that identify you or can be linked to you. Services may involve sensitive health information requiring particular care.

1. Responsibility for Data Processing

The published version of this policy must identify the legal entity operating PsyCare Plus, its contact details and a dedicated privacy request channel. It must also explain the respective roles of the platform and practitioners in handling session information and professional records, including any independent responsibilities.

2. Information You Provide

Depending on the service, you may provide your name, phone number, email address, account and booking details, correspondence and support requests. You may share health or psychological information with a practitioner for assessment and care. Avoid submitting sensitive information through general forms unless necessary and through an appropriate channel.

Practitioner applications may include identification, qualifications, experience and professional registration or licensing documents, as necessary for verification and management of the professional relationship.

3. Technical Information and Device Permissions

Technical information needed to operate and protect services may include IP addresses, device and browser types, error logs and sign-in records. Features requiring camera, microphone, file or notification access must request appropriate permission and explain its purpose. Permissions can be managed through device settings; declining some permissions may affect the related feature.

4. Purposes of Processing

• Creating and verifying accounts and managing service access.
• Organising appointments and sending related confirmations and reminders.
• Enabling the selected practitioner to provide services using necessary information.
• Handling payments, refunds and financial enquiries.
• Responding to support requests and complaints and preventing account misuse.
• Improving performance using appropriate, limited information without including session content in general analytics tools.
• Meeting applicable obligations and managing records and legitimate claims.

5. Appropriate Processing Grounds and Consent

Processing requirements depend on the information, purpose and applicable rules. Processing may relate to providing a requested service, a legal obligation, explicit consent where required or another permitted basis. Browsing the website is not blanket consent to health data processing, recording or marketing. Where processing relies on consent, an appropriate withdrawal method must be available without affecting the lawfulness of earlier processing.

6. Session Privacy and Professional Records

Before services begin, users must be told whether the platform retains session content or only booking and connection information, who holds professional notes and who can access them. Audio or video sessions are not automatically recordings. Any recording requires prior explanation of its purpose, storage, retention and the necessary permissions.

Confidentiality may have limited exceptions relating to applicable obligations or serious safety risks. Disclosure in such cases must be limited to what is necessary under the relevant procedures.

7. Sharing with Practitioners and Service Providers

Necessary information may be shared with your selected practitioner and providers supporting hosting, communications, payments, notifications and support, according to the platform's actual operations. Access must be limited by need and subject to appropriate confidentiality and protection arrangements. Specific information may also be disclosed to authorised bodies where required or permitted under applicable rules.

Any advertising use or independent sharing with other parties must be clearly explained. Agreement to receive care must not be treated as consent to use health information for advertising.

8. Payment Information

Payment information is processed according to the selected payment method and provider's policy. The platform may receive transaction amounts, statuses and references, while card detail handling depends on the actual technical integration. The approved policy must accurately explain this arrangement. Do not send card details or verification codes to practitioners or through general support messages.

9. Cookies and Analytics

The website may use cookies or similar technologies for essential functions, performance measurement or external services. Categories and purposes must be explained, with consent and refusal choices where required. Optional technologies must not operate before any necessary consent is obtained. Browser settings can also manage cookies, although some website functions may be affected.

10. Information Security

Protection measures must reflect the sensitivity of information and processing risks, including access management, account protection and incident handling. No digital service can guarantee absolute security. Strong passwords, protecting sign-in codes and reporting suspicious activity help protect your account.

11. Retention and Deletion

Information is retained as needed for its purpose, taking account of professional and financial record requirements, obligations and legitimate claims. The platform must specify retention periods or the criteria used for each category, including accounts, health records, bookings, support requests and backups.

Account closure does not necessarily delete all records immediately. Some information may require continued retention for a legitimate purpose, which must be explained and its use restricted. When no longer needed, information is appropriately deleted or anonymised.

12. Your Rights and Privacy Requests

Depending on applicable requirements, your rights may include requesting access, correction, deletion, restricted use or a copy of your information, withdrawing consent or objecting to certain processing. Requests should be submitted through the official privacy channel. Identity verification may be required to protect information. If a request cannot be fully fulfilled, the reason and available options will be explained.

13. Children and Adolescents

Services for minors require appropriate age checks, verification of parental or legal representative authority and required consent. Parents must not be assumed to have unrestricted access to all session details. Information sharing depends on the minor's interests and applicable professional and legal requirements. Confidentiality arrangements must be explained before services begin.

14. Processing Outside Your Country

Technical arrangements may involve processing in another country when external hosting or communication services are used. Processing locations, or how to obtain that information, transfer purposes and applicable safeguards and requirements must be established before this policy is approved. Information must not be described as stored entirely within Libya unless verified.

15. Marketing and External Services

Operational messages, such as booking confirmations, are separate from marketing. An appropriate marketing opt-out must be available without disabling necessary service messages. External websites and services have their own privacy policies. Following an external link does not provide general permission to share health information with that party.

16. Updates and Contact

This policy will be updated when data practices change, with the latest revision date shown in the published version. Material changes will be communicated appropriately and new consent requested where necessary. Privacy enquiries, complaints and rights requests should use the dedicated contact details approved and clearly published by the operating entity.