Privacy Policy

Last updated: 28/08/2026

Raha Psychotherapy ("we," "our," or "the Practice") is dedicated to protecting the confidentiality, integrity, and privacy of your personal information and personal health information (PHI). This Privacy Policy outlines our standards and practices for collecting, using, storing, disclosing, retaining, and safeguarding your data when you visit our website or engage in our therapeutic services.

By using our website or services, you agree to the terms of this Privacy Policy and our Terms & Conditions. We encourage you to revisit this page periodically for updates.

1. Scope/Categories of Data Collected

We collect only the minimum necessary information required to assess, schedule, and deliver psychotherapy services, manage billing, and maintain our clinical practice.

1.1. Personal Identifiers & Administrative Data

Full legal name, preferred name, and pronouns.
Contact information: residential address, email address, and phone number.
Date of birth and emergency contact information (name, relationship, phone number, and physical location).
Billing, invoicing, and transaction records (note: Card/UPI details are processed by secure third-party gateways and not stored by the Practice).

1.2. Personal Health Information (PHI) & Clinical Data

Intake questionnaires, psychosocial history, medical and psychiatric history, and medication prescriptions if needed.
Session summaries, clinical progress notes, case conceptualisations, and treatment plans.
Relevant psychometric screening results and collateral information provided with explicit consent.

1.3. Website & Technical Data

IP address, browser type, operating system, and general access timestamps collected via first-party essential website cookies and basic server logs.

2. Lawful Basis & Purpose of Data Processing

2.1. Providing/Improving services

We use this information to address your queries, schedule and manage sessions, and understand your therapeutic needs, ensuring continuity of care and maintaining accurate records as required by the APA's ethical guidelines and the Mental Health Act (2017).

2.2. Safety, Ethics, and Legal Compliance

We keep therapy records and communications in strict confidence. We do not disclose your personal health information to third parties (including family members, employers, or medical doctors) without your written, informed consent, except where mandated or permitted by law, such as when there is a risk of harm to you/someone else, suspected abuse of a child, older adult or someone with vulnerability, or when a court order requires records. These limitations are also outlined in our consent form and will be discussed before we start therapy.

2.3. Data Sharing

Raha Psychotherapy does not sell, rent, or share your data for advertising or marketing. Trusted service providers (telehealth platforms, payment processors, cloud storage) may access only data necessary to deliver their services and are bound by confidentiality obligations. Nominated emergency contacts are informed only in life-risk situations, and only to the degree necessary. Third-party platforms (e.g., Cal.com, Google Meet) have their own privacy policies, which you are encouraged to review.

3. Data Storage, Retention & Security

Session records are stored in encrypted digital format. Clinical records are retained for a minimum of 7 years from the last session, after which they are securely destroyed. In the event of a data breach likely to cause high risk, you will be notified as required by DPDPA 2023.

4. Your Statutory Rights As A Client

4.1. Rights Regarding Health Information (DPDPA 2023)

Right of Access (a summary of data held)
Right to Correction/Rectification (of any factual inaccuracies)
Right to Data Portability/Transfer (share a summary of stored data with another mental health professional of your choosing)
Right to Grievance Redressal ( response within 30 days)
Right to Nominate (an individual to handle your data rights in the event of death or incapacity)
Right to Withdraw Consent (at any time)

To exercise any of the above rights, email us at [rahapsychotherapy@gmail.com] with subject "Data Rights Request."

4.2. Rights As A Mental Health Services User (MHCA 2017)

Access to services without discrimination (S.18);
Advance directive on treatment preferences (S.5–9);
A nominated representative (S.14);
Confidentiality of mental health records (S.23);
Dignity in all interactions (S.20);
Informed consent and information about treatment alternatives (S.22).

Full text: www.indiacode.nic.in.

4.3. Practitioners' Rights

The Practitioner retains:

Professional Autonomy within Ethical and Legal Limits;
Right to Decline/Discontinue services that compromise ethical obligations or safety;
Copyright and Ownership of all clinical notes/materials
Right to Personal Safety and to report abuse or harassment;
Right to Clinical Supervision including anonymised case consultation.

4. Cookies

Our website may use cookies to support basic functions such as maintaining website platform security, server load performance and engagement (anonymised). You can manage or disable non-essential cookies directly through your browser settings. Doing so may impact some website features, but will not affect your access to our therapy services or any other mental health services. Please note, we do not use cookies for advertising, tracking, or profiling.

5. Website, Amendments and Complaints

The Website is informational only. Its use does not imply a therapeutic relationship.

Raha Psychotherapy reserves the right to update the policy occasionally to reflect any legal, ethical, or operational changes. Any revisions will be published on this page with an updated "Last Updated" timestamp (scroll to the "top"). Continued use of services constitutes acceptance.

6. Contact

In case of any questions/concerns about our privacy policy, confidentiality, or how your information is handled, you can write to us:

Grievance Officer: Simran Brijwani (Mumbai, India)

Email: rahapsychotherapy@gmail.com

Contact No: +91 8208379689

We attend to all written inquiries/complaints within 48 hours and provide a formal written response within 30 days.