Last updated: April 2026
Privacy Policy
1. Who We Are
Eunoia ('we', 'us') operates the eunoiatherapy.app platform. We are committed to protecting your personal data and processing it in accordance with UK GDPR, the Data Protection Act 2018, and applicable data protection law.
2. Data We Collect
When you register interest or create an account, we collect your name, email address, professional role, and any message you choose to include. When you use the platform, we collect usage data, log data, and the clinical content you choose to store (for which you are the data controller).
3. How We Use Your Data
We use your contact information to respond to your enquiry and, with your consent, to send you product updates and newsletters. We use usage data to improve the platform and ensure its security. We do not sell your data to third parties.
4. Legal Basis
We process your data on the basis of: (a) your consent when you submit a registration form or newsletter subscription; (b) the performance of a contract when you subscribe to the platform; (c) our legitimate interests in operating and improving the service, where these are not overridden by your rights.
5. Client Data
If you store client records in Eunoia, you are the data controller and we are the data processor. We process such data only on your documented instructions. A Data Processing Agreement (DPA) is available on request and governs this relationship.
6. Data Storage and Security
Your data is stored on secure servers within the European Economic Area. We implement technical and organisational measures including encryption at rest and in transit, access controls, and regular security reviews to protect against unauthorised access, loss, or disclosure.
7. Data Retention
We retain account data for as long as your account is active and for a reasonable period afterwards in case you wish to reactivate. Contact form submissions are retained for 12 months. You may request deletion at any time.
8. Your Rights
Under UK GDPR you have the right to access, correct, delete, or port your personal data, to object to or restrict processing, and to withdraw consent at any time. To exercise any of these rights, contact: privacy@eunoiatherapy.app. You also have the right to lodge a complaint with the Information Commissioner's Office (ico.org.uk).
9. Cookies
We use essential session cookies to operate the platform and, with your consent, analytics cookies to understand how the site is used. You can manage cookie preferences in your browser settings. We do not use advertising or tracking cookies.
10. Third-Party Services
We use Amazon Web Services for infrastructure and email delivery. AWS processes data on our behalf under a Data Processing Addendum. We do not share your data with any other third parties except where required by law.
11. Changes to This Policy
We may update this policy to reflect changes in our practices or applicable law. We will notify you of material changes by email at least 30 days before they take effect.
12. Contact Us
For privacy enquiries or to exercise your rights: privacy@eunoiatherapy.app