Privacy Policy
Effective Date: [September 15, 2025]
This Privacy Policy explains how Global Overview SL (“H24 Psychology,” “we,” “us,” or “our“) collects, uses, discloses, and protects personal information when you access or use our websites, apps, and related online services that link to this Privacy Policy (collectively, the “Site”).
This Policy does not apply to third-party websites, platforms, or services that we do not control. If any page links to a different privacy statement (e.g., a provider’s independent site), that statement governs.
Contact: privacy@h24psychology.com | Global Overview SL, C./ Buenos Aires 3, 35002 Las Palmas de GC, Spain
1) Personal Information We Collect
We may collect the following categories of information:
Identifiers: name, email, postal address, phone number, account credentials.
Online identifiers & device data: IP address, device ID, browser type/version, OS, app version, language, settings.
Internet activity: pages viewed, referring/exit pages, timestamps, clicks, scrolls, feature usage, crash logs.
Approximate geolocation: derived from IP or device settings.
Communications & submissions: content you send to us (e.g., contact forms, feedback, reviews), quiz or questionnaire inputs, or messages exchanged with providers.
Commercial data: subscriptions, purchases, transaction history (payment card data is processed by our payment processor; we do not store full card numbers).
Inferences: derived preferences or interests for personalization.
Demographics (optional): age range, language, if provided.
Sensitive Data: mental health–related answers, conditions, or in-app messages with providers. See Sections 7 and 12 for additional rules.
2) Sources of Information
Directly from you: account creation, forms, surveys, emails, reviews, quiz/self-test responses.
Automatically: via cookies, pixels, SDKs, logs, and similar technologies when you use the Site.
Service providers & partners: analytics, advertising, anti-fraud, hosting, customer support, payments.
Providers/Clinicians: information you exchange with a matched provider through our telehealth features.
3) How We Use Information
We use personal information to:
Provide and improve the Site and our services; troubleshoot and analyze usage.
Personalize content and features, including recommendations.
Communicate with you about accounts, security, updates, and marketing (you may opt out of marketing at any time).
Process transactions and fulfill purchases.
Ensure security, prevent fraud, and debug errors.
Comply with law, enforce terms, protect rights and safety.
Conduct research & analytics, including aggregate or de-identified reporting.
Facilitate telehealth, scheduling, messaging, and provider matching.
We may create de-identified or aggregated data that cannot reasonably be used to identify you and use it for lawful purposes. We do not attempt to re-identify de-identified data.
4) Cookies, Pixels, and Similar Technologies
We and our partners use cookies, pixels, tags, SDKs, and device identifiers to operate the Site, remember preferences, measure performance, and deliver/measure ads where permitted.
Types:
Essential (required for core features)
Functional (preferences)
Analytics (traffic and usage)
Advertising/retargeting (interest-based ads, cross-context behavioral advertising)
Controls: You can manage cookies in browser/device settings. If you are in a region requiring consent (e.g., EEA/UK), we use a consent banner/manager. We honor valid Global Privacy Control (GPC) signals as an opt-out of sale/sharing where required by U.S. law.
5) Disclosure of Information
We may disclose personal information to:
Service providers (data hosting/CDN; analytics; customer support; email/SMS; payments; security/fraud; cloud infrastructure). Examples: Aruba Business (hosting), Google Analytics, Mailchimp, Stripe, Zoom/Doxy.me, Bunny.net.
Professional advisors (legal, accounting, insurance).
Advertising/measurement partners (e.g., Google Ads, Meta Ads) for interest-based ads where permitted.
Providers/Clinicians to deliver telehealth features you request.
Business transfers (merger, acquisition, reorganization).
Legal & safety (subpoena, lawful requests, enforce terms, protect our users and the public).
With your consent or at your direction.
We do not sell your personal information for money. We may engage in “sharing”/targeted advertising as defined by certain U.S. state laws; see Section 10 for your choices.
6) Sensitive Personal Information & Mental Health Data
If you choose to provide sensitive information (e.g., mental health history, symptoms, self-assessments), we limit its use to purposes reasonably necessary to provide requested services, ensure security, comply with law, and other purposes permitted by applicable privacy laws. We do not use sensitive data for targeted advertising or to infer characteristics beyond those purposes.
See Section 12 for HIPAA-specific protections.
7) Data Security
We implement administrative, technical, and physical safeguards appropriate to the nature of the information (e.g., encryption in transit, access controls, backups, monitoring). However, no method is 100% secure.
Incident Notification: We will notify you and/or regulators of data breaches as required by law.
8) Data Retention
We retain information as needed to provide the Site, comply with legal obligations, resolve disputes, and enforce agreements. Retention periods vary by category and purpose. We may keep aggregate/de-identified data.
9) Your U.S. State Privacy Rights (CCPA/CPRA & Others)
If you are a resident of California or other states with comprehensive privacy laws, you may have rights to:
Know/Access the categories and specific pieces of personal information collected.
Delete personal information, subject to exceptions.
Correct inaccurate information.
Opt out of sale/sharing/targeted advertising.
Limit use/disclosure of sensitive personal information.
Appeal a denial of your request.
We honor the Global Privacy Control (GPC) as an opt-out signal for sale/sharing where required.
How to Exercise: Email privacy@h24psychology.com with the subject “Privacy Request”. We may need to verify your identity. Authorized agents may submit requests with proof of authorization.
Non-Discrimination: We will not discriminate against you for exercising your rights.
Do Not Sell or Share My Personal Information: Available in the footer of our Site.
10) Children’s Privacy
The Site is not directed to children under 13. We do not knowingly collect personal information from children under 13. If we learn that a child under 13 has provided personal information, we will delete it. Teens aged 13–17 should use the Site only with parental/guardian consent and oversight when applicable.
11) HIPAA Notice
Because H24 Psychology offers telehealth services, certain information may be considered Protected Health Information (PHI) under the Health Insurance Portability and Accountability Act (HIPAA).
Separate Notice: When HIPAA applies, our use/disclosure of PHI is governed by our Notice of Privacy Practices (NPP), not this Privacy Policy. The NPP describes permitted uses/disclosures, your HIPAA rights, and our duties.
Minimum Necessary: We apply the minimum necessary standard to PHI uses/disclosures where required.
No Marketing with PHI without authorization (unless permitted by HIPAA).
Authorizations: We will obtain your written authorization when HIPAA requires it.
Access the NPP: [Link to Notice of Privacy Practices]
12) International Users (GDPR/UK Data Protection)
If you access the Site from the EEA/UK, we process personal data as a controller. Our lawful bases include consent, contract, legal obligations, and legitimate interests. You may have rights to access, rectify, erase, restrict, object, portability, and withdraw consent. You may lodge a complaint with your supervisory authority. Where required, we use Standard Contractual Clauses (SCCs) for international transfers. Contact privacy@h24psychology.com.
13) Third-Party Links and Services
The Site may link to third-party sites or offer integrations (e.g., video platforms, payment processors). Their privacy practices govern their services. Review their policies before use.
14) Your Choices
Marketing communications: Opt out via email footer “unsubscribe” or by contacting us.
Cookies/ads: Use browser settings, our consent manager (where available), and the “Do Not Sell/Share” controls.
Account & preferences: Update or delete your account in account settings or contact us.
15) Changes to This Policy
We may update this Policy periodically. The Effective Date shows the latest revision. Material changes will be posted on the Site and, where required, we will notify you.
16) Contact Us
If you have questions, privacy requests, or complaints:
Email: privacy@h24psychology.com
Mail: Global Overview SL, C./ Buenos Aires 3, 35002 Las Palmas de GC, Spain
Attn: Privacy Team / Data Protection
Appendix A — CCPA Mapping
Categories Collected: Identifiers; Online Identifiers & Device Data; Internet Activity; Approximate Geolocation; Communications & Submissions; Commercial Data; Inferences; Demographics; Sensitive Data.
Sources: You; automatic collection; service providers/partners; clinicians.
Purposes: provide services; personalization; communications; transactions; security; compliance; analytics; telehealth.
Disclosures: service providers (Aruba, Google Analytics, Mailchimp, Stripe, Zoom/Doxy.me, Bunny.net), advisors, clinicians, legal authorities, affiliates.
Sale/Sharing: no monetary sale; sharing for advertising (Google Ads, Meta Ads). Opt-out available.
Appendix B — Example Vendors
Hosting/CDN: Aruba Business, Bunny.net
Analytics/Monitoring: Google Analytics
Email & Support: Mailchimp
Payments: Stripe
Video/Telehealth: Zoom for Healthcare, Doxy.me
Advertising: Google Ads, Meta Ads