International Privacy & Data Protection

01Purpose of This Page

Heal & Revive serves people across many countries, and this page explains, at a general level, how we approach compliance with several major international privacy frameworks. It works alongside our main Privacy Policy, which governs our overall data practices.

02What Data We Collect

• Contact details you provide (name, email, phone, country/location)
• Information submitted through applications, bookings, and forms, including age where relevant
• Information shared during counselling, listening sessions, or support groups (treated with heightened confidentiality)
• Payment information for digital product purchases (processed by our third-party payment provider)
• Device, browser, and usage data collected automatically, including via cookies

For full detail, see Section 2 of our Privacy Policy.

03Legal Basis for Processing

Where applicable law requires a legal basis, we rely on your consent, performance of a contract (providing a service you requested), our legitimate interests (improving services, ensuring safety), and compliance with legal obligations (including safeguarding and mandatory reporting duties). Where we rely on consent, you can withdraw it at any time by contacting us.

04Your Rights (Access, Deletion, Correction, Portability)

Subject to the specific framework that applies to you (see below), you generally have the right to:

To exercise any of these rights, contact us using the details in Section 11. We may need to verify your identity before fulfilling a request.

05GDPR (European Union)

If you are located in the European Economic Area, we process your personal data in accordance with the General Data Protection Regulation (GDPR). This includes providing a clear legal basis for processing, honoring your rights as a data subject, and using appropriate safeguards for any transfer of your data outside the EEA (see Section 9). You have the right to lodge a complaint with your local supervisory authority.

06UK GDPR

If you are located in the United Kingdom, we process your personal data in accordance with the UK GDPR and the Data Protection Act 2018, which provide protections comparable to the EU GDPR. You may lodge a complaint with the UK Information Commissioner's Office (ICO) if you believe your data has been mishandled.

07CCPA / CPRA (California)

If you are a California resident, the California Consumer Privacy Act, as amended by the California Privacy Rights Act (CCPA/CPRA), gives you the right to know what personal information we collect and why, to request deletion or correction, to opt out of the "sale" or "sharing" of personal information (we do not sell personal information), and to be free from discrimination for exercising these rights.

08Other Jurisdictions

Where feasible, we aim to extend comparable privacy protections to visitors in other countries, including under frameworks such as India's Digital Personal Data Protection Act (DPDP Act), Canada's PIPEDA, Brazil's LGPD, and other applicable regional laws. If your local law provides rights beyond those described here, please contact us and we will do our best to accommodate your request.

09International Data Transfers

As a global organization, your information may be stored or processed in a country other than your own. Where we transfer data internationally, we take steps intended to ensure appropriate safeguards are in place, such as Standard Contractual Clauses or an equivalent mechanism recognized under applicable law.

10Data Retention

We retain personal information only as long as necessary for the purposes described in our Privacy Policy, to comply with legal obligations, resolve disputes, and enforce our agreements. Safeguarding-related records may be retained for longer periods as required by applicable law or good safeguarding practice.