EDHA privacy
Privacy Policy
EDHA is operated by Idalia Mental Health LLP and is designed around confidentiality, data minimisation, purpose limitation and controlled access.
1. Scope and platform role
This policy explains how EDHA handles personal information when you browse the platform, create an account, apply as a mental health professional, book or attend a session, make or receive payments, contact support or use EDHA resources. Mental health professionals listed on EDHA provide their professional services independently.
2. Information EDHA may process
Depending on how you use EDHA, we may process account and contact details, age/adult confirmation, optional gender and location information, booking preferences, selected concern categories, professional verification documents and profile information, booking and payment references, payout records, consent records, support communications, documents intentionally shared for a booking, and limited security, device and session-operational metadata.
3. Why EDHA uses this information
Information is used to create and secure accounts, verify professionals, enable discovery and matching, process bookings and payments, provide online-session access, share permitted post-booking contact details, send transactional notifications, operate support, prevent misuse, investigate service issues, maintain financial and audit records and meet applicable legal obligations.
4. Sensitive counselling information
EDHA aims to minimise collection of the substance of counselling conversations. Standard video and audio counselling sessions are not recorded by EDHA. Private counselling chat is designed so readable counselling content is not available through normal EDHA administration tools. Counselling content is not used for advertising or marketing profiling.
5. Post-booking information sharing
After successful payment and confirmed booking, EDHA may share the registered client and professional email/mobile details with the other party for legitimate session coordination. Booking notifications may contain the professional/client name, verified designation where relevant, selected concern category, disclosed gender, city/region, language, mode, duration, schedule, amount/payment status and booking reference. Routine booking emails should not contain counselling notes, private chat content or free-text clinical disclosures.
6. Professional application and verification data
Professional applicants may provide identity, qualification, training, experience, registration/licence information where applicable and supporting documents. EDHA uses this information to assess platform eligibility and the designation/scope that may be displayed. Verification documents are not intended for public display.
7. Documents shared for a booking
Documents intentionally exchanged for a booking are stored privately with booking-level access controls. Downloads should use short-lived authorised access rather than permanent public links. Documents are not exposed through the normal EDHA admin interface. Limited exceptional processing may be required for malware/security checks, incident response, legal compliance or recovery.
8. Payments and professional payouts
Payment service providers process the information required to complete transactions. EDHA/Idalia may retain transaction identifiers, amounts, statuses, refunds, payout calculations and accounting records, but should not store full card credentials. Professional payout records may include eligible sessions, gross entitlement, EDHA platform/service fee, statutory deductions where applicable, adjustments and net transfer.
9. Transactional communications
EDHA may send account, verification, booking, payment, rescheduling, cancellation, session, support and security communications necessary to operate the service. These service communications are distinct from optional promotional marketing.
10. Service providers
EDHA may use selected hosting, database, communications, live-session, email/SMS, security and payment service providers where required to deliver the platform. We aim to disclose only the information reasonably necessary for the relevant function and do not intentionally provide counselling content to advertising platforms.
11. Security
EDHA uses access controls, private storage, encryption in transit and other technical and organisational safeguards appropriate to the service. No internet service can guarantee absolute security. Users are responsible for protecting their login credentials, devices and private session environment.
12. Retention
EDHA retains personal information only for as long as reasonably necessary for platform operation, legal/accounting obligations, professional verification, disputes, fraud prevention, security and legitimate record-keeping. Counselling audio/video is not retained because EDHA does not record it as part of the standard service. Detailed retention periods should be maintained in EDHA's internal retention schedule and legally reviewed before launch.
13. Access, correction and other requests
Subject to applicable law and lawful retention requirements, users may request access to information about processing, correction or updating of eligible data, erasure of eligible data, withdrawal of consent where processing relies on consent and grievance redressal. Identity verification may be required before acting on a request.
14. Confidentiality and lawful exceptions
Confidentiality is fundamental to EDHA. Information may nevertheless need to be preserved, processed or disclosed where required by applicable law or a competent authority, for security/incident response, or where a qualified professional has an applicable legal or professional obligation relating to serious risk of harm. Any such handling should be limited to what is reasonably necessary.
15. Children
EDHA's current counselling-booking service is intended for adults aged 18 or above. The production platform should not knowingly permit an under-18 user to complete the adult counselling booking flow.
16. Policy changes and consent evidence
Material policy versions are versioned. Where acceptance or consent is required, EDHA may retain evidence of the version accepted and the time of acceptance.
17. Account closure and erasure
Clients and professionals may request permanent account closure from their account page. Closure is blocked while there are open or unresolved sessions, pending payment/refund transactions, open support or review matters and, for professionals, unsettled professional payouts. Once eligible closure is completed, active account/profile information is removed or anonymised and the account cannot be restored. Certain transaction, accounting, fraud-prevention, dispute, audit, security or professional-verification records may nevertheless be retained where reasonably necessary for the specified purpose or where retention is required or permitted by applicable law. Such retained records do not remain as an active public profile.
18. Contact, privacy and professional-conduct concerns
For privacy, support or professional-conduct concerns, contact ask@edha.life or use EDHA Support. For a professional-conduct concern, include the booking reference and a factual description; do not send unnecessary sensitive counselling content. EDHA may process information reasonably necessary to review the platform issue, subject to confidentiality, applicable law and access controls. Administrative correspondence may be sent to admin@edha.life. Phone: +91 83686 23753. EDHA is operated by Idalia Mental Health LLP, Gurugram, Haryana, India.
Admin-assisted account closure
Where a client or professional asks EDHA to close an account, the request should be sent from the registered email address. EDHA Super Admin may complete closure only after the platform confirms that no open session, pending payment, refund, professional payout or unresolved support/review matter remains. The administrator processing the request must record their name, the date/time and the reason for closure. EDHA retains a limited closure audit record and any records that must be retained for legal, accounting, payment, dispute, fraud-prevention, security or professional-verification purposes.