Policy

Privacy Policy

Last updated: 1 April 2026

This Privacy Policy explains how TherapistSG collects, uses, discloses, and protects your personal data when you use our website and services. We handle personal data in line with Singapore's Personal Data Protection Act (PDPA) and other applicable data protection laws in the regions where we operate. By using our Services, you consent to the practices described in this policy.

Contents

  1. Who We Are
  2. Information We Collect
  3. How We Collect It
  4. How We Use Your Information
  5. Consent and Legal Basis
  6. Sensitive and Health Information
  7. Sharing and Disclosure
  8. Cross-Border Transfers
  9. Confidentiality and Its Limits
  10. Messaging Apps and Video Tools
  11. Data Security
  12. Data Retention
  13. Your Rights
  14. Cookies and Analytics
  15. Third-Party Links
  16. Children and Minors
  17. Changes to This Policy
  18. Governing Law
  19. Contact and Data Protection

1Who We Are

TherapistSG is a mental health and professional support platform operated as part of a group of platforms. The group operates across the Asia-Pacific region, with platforms serving Singapore, Malaysia, Thailand, Indonesia, India, the Philippines, Australia, and other markets, and with head office and administrative functions located outside Singapore, including in Thailand, India, and Malaysia. For the purposes of the PDPA, we act as the organisation responsible for the personal data we collect through the Services.

2Information We Collect

Depending on how you use the Services, we may collect:

  • Identity and contact details, such as your name, email address, phone number, and messaging usernames (including WhatsApp and Signal).
  • Intake and wellbeing information that you provide in your intake form and during sessions, which may include health and mental health information.
  • Booking and payment information, such as your package details and payment confirmations. Card and banking details are handled by our payment processor and are not stored by us.
  • Communications, such as messages, acknowledgements, and correspondence exchanged through our support channels and messaging apps.
  • Technical and usage information, such as device, browser, and website usage data collected through standard web technologies.

3How We Collect It

We collect information directly from you when you complete an intake form, make a booking, communicate with us, or attend a session. We also collect certain technical information automatically when you visit our website. We do not require you to create an account to use the Services.

4How We Use Your Information

We use your personal data to:

  • Deliver the Services, including matching you with a suitable practitioner and scheduling sessions.
  • Process payments and issue booking acknowledgements.
  • Communicate with you about your bookings, onboarding, and support requests.
  • Maintain session and minute records for service and billing purposes.
  • Improve, secure, and administer our website and Services.
  • Comply with legal, regulatory, and safety obligations.

5Consent and Legal Basis

We collect and use your personal data on the basis of your consent, given when you provide your information and use the Services, and where permitted or required by applicable law. You may withdraw consent at any time by contacting us, subject to legal or contractual restrictions and reasonable notice. Withdrawing consent may mean we can no longer provide some or all of the Services to you.

6Sensitive and Health Information

The Services involve information about your mental health and wellbeing, which is sensitive in nature. By providing this information and proceeding with the Services, you consent to our collection and use of it for the purpose of delivering your care. We handle such information with additional care and restrict access to those who need it to support your care and our operations.

7Sharing and Disclosure

We do not sell your personal data. We may share it with:

  • Your assigned practitioner, to the extent needed to deliver your care.
  • Service providers that support our operations, such as payment processing (Stripe), video conferencing (Zoom and Google Meet), and messaging (WhatsApp and Signal).
  • Other entities within the Iacademia International group that support billing, onboarding, and administration.
  • Authorities or third parties where disclosure is required by law, or is necessary to protect the safety of you or another person.

8Cross-Border Transfers

Because our operations span multiple countries, your personal data may be processed and stored outside Singapore, including in Thailand, India, and Malaysia, and by service providers located in other countries. Where personal data is transferred across borders, we take reasonable steps to ensure it is protected to a standard comparable to that required under the PDPA.

9Confidentiality and Its Limits

When confidentiality may be limited

While we treat your information as confidential, confidentiality may be limited where there is a risk of serious harm to you or another person, where a minor or vulnerable person may be at risk, or where disclosure is required by law. In such cases, we may disclose relevant information to the appropriate people or authorities.

10Messaging Apps and Video Tools

Onboarding acknowledgements are issued through WhatsApp or Signal, and your practitioner communicates with you through Signal. Sessions are conducted over Zoom or Google Meet. These are independent third-party services with their own privacy policies and security practices, which apply to information handled within them. We encourage you to review their policies. We use Signal for practitioner communication because it is a widely used, encrypted, privacy-focused application.

11Data Security

We apply reasonable administrative, technical, and organisational measures to protect personal data against unauthorised access, use, or disclosure. No method of transmission or storage is completely secure, and while we work to protect your information, we cannot guarantee absolute security.

12Data Retention

We retain personal data for as long as necessary to fulfil the purposes described in this policy, to meet our legal, clinical, and business obligations, and to resolve disputes. When personal data is no longer needed, we take reasonable steps to delete or anonymise it.

13Your Rights

Subject to applicable law, you may:

  • Request access to the personal data we hold about you.
  • Request correction of inaccurate or incomplete personal data.
  • Withdraw consent to our collection, use, or disclosure of your personal data.
  • Ask questions about how your personal data is handled.

To exercise any of these, please contact us using the details in Section 19. We may need to verify your identity before responding, and some requests may be subject to legal exceptions.

14Cookies and Analytics

Our website may use cookies and similar technologies to operate the site, remember preferences, and understand how the site is used. You can control cookies through your browser settings. Disabling some cookies may affect how the website functions.

15Third-Party Links

Our website may contain links to third-party sites. We are not responsible for the privacy practices or content of those sites, and this policy does not apply to them.

16Children and Minors

The Services are intended for adults. Where a person under 18 uses the Services, this must be with the consent and supervision of a parent or legal guardian, who is responsible for the information provided on the minor's behalf.

17Changes to This Policy

We may update this Privacy Policy from time to time. Changes take effect once posted to our website. We encourage you to review this page periodically.

18Governing Law

This Privacy Policy is governed by the laws of Singapore. Any dispute arising out of or in connection with it is subject to the exclusive jurisdiction of the courts of Singapore.

19Contact and Data Protection

For any questions about this Privacy Policy, or to make a data access, correction, or consent-withdrawal request, please contact us:

By using the Services, you confirm that you have read and understood this Privacy Policy, including how we collect, use, share, and protect your personal data, the cross-border nature of our operations, and the limits of confidentiality set out above.

Last updated: 1 April 2026