Privacy Policy

Last updated: June 2026 · Version 1.0

1. Who we are

Faresay Ltd (company registration pending, UK) operates the Faresay platform at faresay.com and faresay.co.uk. We are the data controller for personal data processed via our platform.

Contact: privacy@faresay.com

2. Special category data

Information about your mental health is special category data under UK GDPR Article 9. We process this data only with your explicit consent, which you provide during onboarding. You may withdraw consent at any time by contacting us — this will not affect the lawfulness of processing before withdrawal.

3. What we collect

  • Account information: name, email address, date of birth
  • Questionnaire responses: reason for seeking therapy, therapy history, approach preferences
  • Therapist credentials: registration body, number, expiry
  • Session data: scheduled times, video session metadata (not recordings)
  • Payment data: processed by Stripe — we store amounts and status only
  • Messages: encrypted in transit; stored for 7 years for clinical governance purposes

4. How we use your data

  • To match clients with suitable therapists
  • To facilitate and deliver therapy sessions
  • To process payments and issue refunds
  • To send transactional emails (booking confirmations, reminders)
  • To verify therapist credentials

5. Data processors

We use the following third-party processors, each bound by a Data Processing Agreement:

  • Clerk — authentication (US, SCCs in place)
  • Neon — database (EU, eu-west-2)
  • Stripe — payments (US/EU, SCCs in place)
  • Daily.co — video sessions (EU data residency)
  • Resend — transactional email (US, SCCs in place)

6. Retention

We retain personal data for 7 years from the end of a therapeutic relationship, in line with BACP/UKCP record-keeping standards. Account data is deleted within 30 days of an account deletion request, subject to legal hold requirements.

7. Your rights

Under UK GDPR you have the right to access, rectify, erase, restrict, and port your data, and to object to processing. Contact privacy@faresay.com to exercise any right. You also have the right to lodge a complaint with the ICO at ico.org.uk.

8. Cookies

We use essential session cookies only. No advertising or tracking cookies are set.