1. Introduction

This Privacy Policy explains how areeka care S.A.L. ('areeka care,' 'we,' 'us,' 'our') collects, uses, shares, and protects personal data on our website and mobile applications (the 'Platform'). It forms part of our Terms and Conditions of Use. By using the Platform, you agree to this Policy and the Terms. If you do not agree, please discontinue use.

2. Definitions

• User/Client/You: An individual using the Platform.
• Specialist: Independent licensed mental-health professionals (including psychotherapists, psychoanalysts, clinical psychologists, counsellors, and comparable practitioners) who provide services to Clients via the Platform.
• Personal Data: Any information relating to an identified or identifiable person.
• Sensitive Data: Personal data revealing health or similar special categories.
• Processing: Any operation performed on personal data (collection, storage, use, etc.).
• Controller: The entity that determines purposes and means of processing (areeka care S.A.L.).
• Processor: A third party that processes data on our behalf (e.g., hosting, payments).

3. Scope and Role

areeka care provides a technology Platform that connects Users with independent Specialists. We do not provide medical or therapeutic care and are not a healthcare provider. Specialists act independently and are responsible for their own professional compliance.

4. Categories of Data We Process

• Identification and Contact: name, age, email, phone, preferred language, country/city, emergency contact.
• Account and Profile: login credentials, settings, session history, selected Specialist.
• Therapy-Related (administrative only): bookings, confirmations, cancellations, timestamps. We do not record or monitor therapy content.
• Specialist Verification: licenses/qualifications, ID documents, CV, banking details for payouts.
• Payments: card/billing details (processed by third-party gateways), payment status, receipts.
• Technical/Usage: IP address, device/browser info, logs, cookies/SDK events, crash analytics.
• Communications: messages exchanged between the Client and Specialist, as well as with areeka care support. These messages are fully encrypted and accessible only to the Client and the Specialist - no one else, including areeka care, can view or access their content.

Voluntary Sensitive Data: You may share health or personal details with your Specialist. Such content is confidential between you and the Specialist and is not accessed by areeka care except as described in clause 9 (limited oversight).

5. Legal Bases for Processing

We process data on one or more of the following grounds:

• Contractual necessity (provide the Platform, manage bookings and payments).
• Legal obligation (accounting, record-keeping, safety, lawful requests).
• Legitimate interests (fraud prevention, service improvement, security).
• Consent (optional marketing or non-essential cookies; you may withdraw at any time).

6. Purposes of Processing

• Create and manage accounts; enable Clients to choose Specialists; and schedule sessions.
• Process payments and provide invoices/receipts.
• Provide support, quality control, security monitoring, and service reliability.
• Communicate notices about bookings, security, or policy updates.
• Perform aggregate, anonymised analytics to improve the Platform.
• Send marketing communications only with consent (opt-out anytime).
• Contact your emergency contact or authorities if there is a credible risk of serious harm.

7. Sharing and Disclosures

We share only what is necessary and under appropriate safeguards:

• With Specialists: relevant Client details (e.g., name, language, broad goals) to deliver care. Specialists are contractually bound to confidentiality and applicable ethics/laws.
• With Clients: Specialists' professional profiles, qualifications, and availability.
• Processors/Service Providers: hosting, storage, analytics, email/SMS, payments (e.g., Stripe) - all under written data-processing agreements and confidentiality.
• Affiliates: intra-group operational purposes under equivalent protections.
• Legal/Safety: to competent authorities when required by law, subpoena, court order, or to prevent/address harm or unlawful activity.
• Business Transactions: merger, acquisition, or asset transfer, subject to continued protection.

We never sell personal data. Off-Platform payments are not authorised.

8. International Transfers

Data may be processed or stored outside Lebanon. Where this occurs, we ensure equivalent protection via contractual safeguards (e.g., data-transfer clauses) or other legally recognised mechanisms. You consent to such transfers consistent with this Policy.

9. Confidentiality and Limited Oversight

areeka care does not access, store, or record private therapy content. Limited, logged access by authorised clinical oversight personnel may occur only to:

• verify technical functionality and proper use;
• investigate formal complaints, safety concerns, or ethics violations;
• assist urgent intervention where imminent risk is reported;
• ensure compliance with professional standards/quality assurance;
• perform anonymised, aggregate research that cannot identify individuals.

All oversight personnel are subject to confidentiality obligations.

10. Security

All communications on areeka care are secured using industry-standard encryption protocols to protect your data during transfer and storage. Our platform and hosting providers follow best practices to maintain the confidentiality and integrity of your information. We implement technical and organisational measures, including:

• role-based access;
• staff background checks, confidentiality agreements, and least-privilege access;
• monitoring, vulnerability management, and incident response.

No internet service is 100% secure. We are not liable for events beyond our reasonable control (e.g., sophisticated cyberattacks, force majeure, or third-party outages).

Data Breach Notification: If a breach likely to affect your rights occurs, we will notify affected Users without undue delay and inform competent authorities when required, including the nature of the breach and steps taken.

11. Cookies and Tracking

We use essential cookies (security, login, session) and, with your consent, non-essential cookies/SDKs (analytics, performance, occasional marketing). You can manage preferences in your browser and via our cookie banner/settings. See our Cookie Notice for details.

12. Minors

We do not knowingly collect data from individuals under the applicable age of consent without verified parental/guardian consent. Suspected under-age accounts are deactivated until consent is verified.

13. Data Retention

areeka care does not store or retain any records of therapy conversations or session notes made by the specialist during sessions - these remain exclusively with the specialist conducting the session.

We follow strict international standards to protect your information - including the General Data Protection Regulation (GDPR), the Health Insurance Portability and Accountability Act (HIPAA), and Lebanese privacy regulations. These frameworks guide how we collect, store, and safeguard your personal and health data.

The only data we collect and retain are the necessary details you provide when registering on the platform, such as your name, email address, phone number, and session preferences, to provide our online therapy services and communicate with you safely. Your information is handled with transparency and respect, and protected through strong security measures.

Inactive accounts shall be automatically deleted after two (2) years, unless the user logs in again to reactivate the account. By resetting your password and accessing your account, you acknowledge and confirm your intention for areeka care to maintain your account and associated data in active status.

You remain in full control of your data. You can request to access, update, or delete it at any time.

Certain financial/transaction data may be retained separately for accounting compliance.

14. Your Rights

Subject to law, you may:

• Access and receive a copy of your personal data;
• Rectify inaccurate or incomplete data;
• Object or restrict certain processing;
• Withdraw consent (for marketing or non-essential cookies);
• Request deletion of non-mandatory data (note: therapy/health and certain financial records may be retained as required by law);
• Data portability (where technically feasible).

To exercise these rights, email contact@areekacare.com. We will respond within 30 days (extendable where permitted). We may need to verify your identity.

15. No Automated Decisions

We do not use automated decision-making or profiling that produces legal or similarly significant effects on you.

16. Liability and Platform Role

areeka care is a digital platform facilitator and is not responsible for the actions, omissions, advice, or outcomes of any Specialist or Client interaction. The Platform is provided 'as is,' without warranty of uninterrupted service, data integrity, or particular outcomes. See our Terms and Conditions of Use for Limitation of Liability.

17. Changes to this Policy

We may update this Policy at any time. The latest version is posted on the Platform and becomes effective upon publication. Continued use after updates constitutes acceptance. If you believe your privacy rights have been infringed, you may also contact the competent authority in your jurisdiction.

18. Consent

By using areeka care, you confirm that you have read, understood, and agree to this Privacy Policy.

areeka care is a registered brand of areekaweb S.A.L. (Lebanon).

Last updated: 19 November 2025