Legal
Privacy Policy
Last updated: June 2026
Psychology Embassy ("we", "our", "us") is committed to protecting your personal information. This Privacy Policy explains what data we collect, why we collect it, how we use it, and your rights — in compliance with India's Digital Personal Data Protection Act 2023 (DPDP Act) and applicable global standards.
By using our website at psychologyembassy.com and booking our services, you agree to this policy. If you do not agree, please do not use our services.
1. What Information We Collect
Account Information: When you sign up, we collect your name, email address, and password (stored securely via Supabase — we never see your raw password).
Booking Information: When you book a counseling session, we collect your name, email, the counselor you selected, your chosen date and time, and any notes you voluntarily provide about the reason for your session.
Payment Information: Payments are processed by Razorpay. We do not store your card number, CVV, or any payment credentials. We only store the Razorpay Order ID and Payment ID to confirm your booking. Razorpay's privacy policy applies to payment data.
Application Information: If you apply for a course or internship, we collect your name, email, phone number, LinkedIn profile URL, and statement of purpose. Resume files are stored securely and accessible only to our team.
Usage Data: We collect anonymised analytics data (pages visited, time on site) via Google Analytics 4 to improve our website. This data cannot identify you personally.
Cookies: We use strictly necessary cookies for authentication and optional analytics cookies. See our Cookies Policy for details.
2. How We Use Your Information
- •To create and manage your account.
- •To confirm and manage your counseling session bookings.
- •To send you booking confirmation emails and meeting links via Resend.
- •To allow your assigned counselor to prepare for and conduct your session.
- •To review internship and course applications internally.
- •To improve our website and services using anonymised analytics.
- •To comply with legal obligations.
We do not sell, rent, or share your personal data with third parties for marketing purposes. Ever.
3. Data Sharing
We share your data only with the following trusted services who process it on our behalf:
- •Supabase (Ireland / USA) — database and authentication
- •Sanity (USA) — content management
- •Razorpay (India) — payment processing
- •Resend (USA) — transactional email delivery
- •Google Analytics (USA) — anonymised website analytics
- •Clerk (USA) — user authentication (where applicable)
All third-party services are bound by their own privacy policies and applicable data protection laws. International transfers are covered by standard contractual clauses or equivalent mechanisms.
4. Sensitive Health Information
You may voluntarily share sensitive information relating to your mental health in the "notes" field when booking a session, or during your counseling sessions. This information is:
- •Accessible only to the specific counselor assigned to your session and our core administrative team.
- •Never shared with any third party without your explicit written consent.
- •Treated with the highest confidentiality.
Exception: We may disclose information without your consent only if required by law or if there is an imminent risk of harm to you or others.
5. Data Retention
We retain your data for as long as your account is active or as needed to provide services. Specifically:
- •Account data: Retained until you request deletion.
- •Appointment records: Retained for 3 years for audit and legal compliance.
- •Payment records: Retained for 7 years as required by Indian financial law.
- •Application resumes: Retained for 6 months after application review, then deleted.
6. Your Rights (DPDP Act 2023)
Under India's Digital Personal Data Protection Act 2023, you have the right to:
- •Access the personal data we hold about you.
- •Correct inaccurate or incomplete personal data.
- •Request deletion of your personal data (right to erasure), subject to legal retention requirements.
- •Withdraw consent for data processing at any time.
- •Nominate a person to exercise your rights on your behalf.
- •File a complaint with the Data Protection Board of India.
To exercise any of these rights, email us at thepsychologyembassy@gmail.com. We will respond within 30 days.
7. Security
We implement industry-standard security measures including encrypted data transmission (HTTPS/TLS), secure database access controls, and regular security reviews. However, no system is 100% secure. If you believe your account has been compromised, contact us immediately at thepsychologyembassy@gmail.com.
8. Children's Privacy
Our services are intended for individuals aged 18 and above. We do not knowingly collect personal data from minors. If you believe a minor has provided us data, please contact us and we will delete it promptly.
9. Changes to This Policy
We may update this Privacy Policy from time to time. If we make significant changes, we will notify you by email or via a prominent notice on our website at least 7 days before the changes take effect. Continued use of our services after the effective date constitutes acceptance.
10. Contact Us
If you have any questions about this Privacy Policy or how we handle your data, please contact our Data Protection contact: