Privacy Policy

Last updated: June 2025

Enliven Counselling Center (“we”, “us”, or “our”) is committed to protecting your privacy. This policy explains what personal information we collect, how we use it, and your rights under the UAE Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data (PDPL).

1. Information We Collect

We collect information you provide directly when you use our services:

• Contact & booking details: name, email address, and phone number submitted via our booking or contact forms.
• Session records: clinical notes and session summaries maintained by your therapist as part of your care.
• Usage data: anonymised analytics data (pages visited, session duration) collected automatically via Google Analytics or similar tools.
• Communications: emails, WhatsApp messages, or other correspondence you send us.

We do not collect sensitive health data through our website forms. Clinical information is gathered and stored separately within our secure practice management systems.

2. How We Use Your Information

• To respond to your enquiries and process appointment bookings.
• To provide, manage, and improve our counselling and therapy services.
• To send appointment confirmations, reminders, and important service updates.
• To fulfil our legal and professional obligations as a mental health practice.
• To improve our website and understand how visitors use it (analytics only).

We will never sell, rent, or trade your personal data to third parties for marketing purposes.

3. Data Storage & Security

All client data is stored securely using industry-standard encryption and access controls. Clinical session notes are held in HIPAA-aligned practice management software with restricted staff access. We retain client records for a minimum of seven (7) years in accordance with UAE healthcare regulations, after which records are securely destroyed.

Our website is hosted on Vercel infrastructure located in secure data centres. Data submitted through contact and booking forms is transmitted over TLS-encrypted connections.

4. Third-Party Services

• Google Analytics: we use Google Analytics to understand website traffic. Data is anonymised; no personally identifiable information is shared. You may opt out using the Google Analytics Opt-out Browser Add-on.
• Email delivery: contact form submissions are delivered via Resend, a transactional email service. They process your name and email only to route the message.
• Payment processors: payment for sessions is handled directly in-clinic or via secure third-party payment links. We do not store card details on our website.

5. Cookies

Our website uses essential cookies required for basic functionality and analytics cookies (via Google Analytics) to help us understand visitor behaviour. By continuing to use our site, you consent to these cookies. You can disable cookies in your browser settings; however, some site features may not function correctly.

6. Your Rights Under UAE PDPL

Under the UAE Personal Data Protection Law (PDPL), you have the right to:

• Access the personal data we hold about you.
• Request correction of inaccurate or incomplete data.
• Request deletion of your data (subject to our legal retention obligations).
• Withdraw consent for processing where consent is the legal basis.
• Object to processing of your data in certain circumstances.
• Request restriction of processing while a dispute is resolved.

To exercise any of these rights, please contact us at the address below. We will respond within 30 days of receiving your request.

7. Minors

Our website is not directed at children under the age of 18. If you are a parent or guardian and believe your child has provided us with personal data without consent, please contact us immediately and we will take steps to delete that information.

8. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be notified via email or a prominent notice on our website. The “Last updated” date at the top of this page reflects the most recent revision.

9. Contact Us

For any questions about this Privacy Policy, or to make a data request, please contact: