Privacy Policy

1. Who we are

This Privacy Policy explains how Book Therapy ("we", "us", "our") collects, uses, and protects personal data through The Book Therapy Method™ Directory ("the Directory"), located at directory.booktherapy.io.

2. What data we collect

We collect different types of information depending on how you use the Directory:

• Visitor data: pages viewed, approximate location from IP address (for analytics), device/browser type, and referral information.
• Practitioner profile data: name, email address, professional biography, photo, contact details, qualifications, areas of work, languages spoken, and any other information you choose to include in your public listing.
• Account data: authentication information (via Google or magic link email), account status, and submission/review history.
• Verification documents: if you upload proof of training, registration, or insurance, these are stored securely and are not publicly visible.
• Communications: emails we send you and any responses, including automated notifications about your listing status.

3. How we use your data

We use the information we collect to:

• Display public practitioner listings to visitors.
• Manage applications, reviews, approvals, and listing status.
• Send transactional emails such as submission confirmations, approval notices, reminders, and account updates.
• Verify practitioner credentials where documents are provided.
• Understand how the Directory is used and improve its functionality.
• Protect against misuse, spam, and security threats.

4. Public vs private data

Your practitioner profile is designed to be public once approved. Information you enter into your profile — such as your name, photo, bio, contact details, and areas of work — may be visible to anyone who visits the Directory.

Verification documents, account email addresses, and internal notes are not publicly visible and are only accessed by authorised administrators for review purposes.

5. Document uploads

If you upload documents as proof of training or professional registration, they are stored in a secure, private storage bucket with access restricted to authorised administrators. Documents are not displayed on public listings. We retain them only for as long as necessary to verify and manage your listing.

6. Emails and marketing

We send transactional emails related to your account and listing. These include application confirmations, approval notifications, reminders, and important service updates. Because these messages are necessary for the service, you cannot opt out of them while maintaining an active listing.

We do not send promotional marketing emails unless you have explicitly agreed to receive them, and you can unsubscribe from marketing communications at any time.

7. Analytics and cookies

We use analytics tools to understand how visitors interact with the Directory. This may involve cookies or similar technologies that collect information such as pages visited, time spent on site, and general location. Analytics data is aggregated and does not identify you personally.

You can usually manage or disable cookies through your browser settings. Some features of the Directory may not work properly if cookies are disabled.

8. Data sharing

We do not sell personal data. We share data only with trusted service providers who help us operate the Directory, such as hosting, database, email delivery, payment processing (where applicable), and analytics providers. These providers are contractually required to handle data securely and only for the purposes we specify.

9. Data retention

We keep your personal data for as long as your listing is active or as needed to provide the service. If you close your account or request removal of your listing, we will delete or anonymise your data within a reasonable period, except where we are required to keep it for legal or regulatory purposes.

10. Your rights

Depending on your location, you may have rights to:

• Access the personal data we hold about you.
• Correct inaccurate or incomplete data.
• Request deletion of your data.
• Object to or restrict certain processing.
• Withdraw consent where processing is based on consent.

To exercise any of these rights, contact us at hello@booktherapy.io.

11. Security

We take reasonable technical and organisational measures to protect personal data against unauthorised access, loss, or misuse. This includes encrypted connections (HTTPS), access controls, and secure storage for sensitive documents. No system is completely secure, and we cannot guarantee absolute security.

12. Changes to this policy

We may update this Privacy Policy from time to time. If we make significant changes, we will notify practitioners by email or through the Directory. Continued use of the Directory after changes are posted constitutes acceptance of the updated policy.

13. Contact

If you have any questions about this Privacy Policy or how we handle your data, please contact us at hello@booktherapy.io.