Last updated: October 13, 2026 • 8 min read
Your Privacy at MLC
What you share in therapy is personal. This policy explains, in plain words, what information we collect, why we need it, who can see it, and the choices you have. We do not sell your information or use it for advertising.
Contents
In short
No selling, no ads: your information is never sold or used for advertising.
Video is not recorded: recording is switched off for every session.
You control analytics: they run only if you accept them.
1. Who We Are
MLC Health and Wellness Centre ("MLC", "we") runs this website and the MLC client and therapist portals. We connect clients with independent, vetted therapists and supervisors for sessions online, worldwide, and in person with select therapists.
This policy applies to everyone who uses MLC: visitors, clients, therapists and supervisors. For any privacy question, email Therapy@MLCHealth.in.
2. Information We Collect
We collect only what we need to run the service. Most of it comes from you directly, or from your therapist as part of your care.
Account details
Your name, email address and sign-in details, and any profile details you add, such as a phone number, photo, time zone or preferred language.
Matching quiz & intake answers
What you tell us when looking for a therapist: what you would like help with, your preferences, and screening questionnaires such as the DASS-21.
Bookings & sessions
Appointment dates, booking requests, reschedules, cancellations and session links.
Clinical records
Session notes, forms, goals and safety plans that your therapist writes or assigns as part of your care.
What you add in your Care Space
Journal entries, mood check-ins, goals, files you upload and messages you send to your therapist inside the portal.
Payments
Amounts, invoices, payment status and payment reference numbers. Card, UPI and bank details are entered with Razorpay, and we never see or store them.
Therapist & supervisor applications
For practitioners: qualifications, licences, CVs, identity and practice details shared for vetting and your public profile.
Support & contact messages
What you send through contact forms, support tickets, feedback or email.
Technical information
Basic information your browser sends, such as IP address and device type, used to keep the service secure and working. Usage analytics are collected only if you accept them (see section 6).
3. How We Use It
To provide your care: matching you with a therapist, bookings, video sessions, your Care Space, messages and session records.
To keep you informed: booking confirmations, reminders, changes to your sessions and important account notices by email.
To take payments: invoices, receipts, refunds and therapist subscriptions.
To vet practitioners: checking the qualifications and licences of therapists and supervisors before they are listed.
To keep MLC safe: protecting accounts, preventing misuse and fixing problems.
To improve the site: only through anonymous analytics, and only if you accept them.
We never sell your information, share it with advertisers, or use what you share in therapy for marketing.
4. Who Can See It
Your therapist: sees your records only when you are connected through a booking, an accepted referral, or a record they created. When your work together ends, their access becomes read-only.
Your journal: entries stay private unless you choose to share a specific entry with your therapist.
Supervision: supervision notes and reports belong to the therapist and supervisor and are never shown to clients.
The MLC team: a small number of authorised staff can access records when needed to run the service, handle support, vet practitioners or keep people safe.
Service providers: the companies listed in section 5, only for the job they do for us.
When the law requires it: for example a valid court order, or to protect someone from serious harm (see section 10).
Therapist and supervisor profiles you choose to publish (name, photo, qualifications, specialities, fees) are public on the directory.
5. Service Providers
We use trusted companies to run parts of the service. They process your information on our behalf and only for the purposes below. Some are based outside India, so your information may be processed in other countries.
Clerk
Sign-in and account security. Your password is handled by Clerk; we never see it.
Render
Hosts our application server and database, in Singapore.
Vercel
Hosts and delivers the website pages.
Cloudflare R2
Stores uploaded files. Sensitive files are kept in private storage, opened only through short-lived links.
Jitsi as a Service (8x8)
Video sessions. Recording, live streaming and transcription are turned off.
Razorpay
Processes payments and subscriptions.
Resend & Brevo
Send emails such as booking confirmations, reminders and account notices.
Google Analytics
Anonymous usage statistics, only if you choose "Accept All".
If you contact us on WhatsApp, that conversation is also covered by WhatsApp's own privacy policy.
7. How We Protect It
Encrypted connections: everything between your device and MLC travels over HTTPS.
Access checks on our servers: every request is checked so people only reach records they are allowed to see.
Private file storage: sensitive uploads such as client documents, CVs and licences are kept in private storage and open only through links that expire within an hour.
Unrecorded video: recording, streaming and transcription are switched off for sessions.
Secure sign-in: passwords and sign-in are handled by Clerk, so we never store your password.
No online service can promise perfect security. If we learn of a breach that affects your information, we will tell you and the relevant authorities as the law requires.
8. Keeping & Deleting Data
We keep your information while your account is open. When you delete your account:
Your login is removed and you can no longer sign in.
If you never had a session, your profile is deleted completely.
Otherwise your personal details, journal entries, check-ins, goals, messages and your own uploads are erased.
Session notes, appointments and payment records are kept under "Deleted client" without your name or contact details, because therapists must keep clinical records and we must keep financial records by law.
Upcoming sessions, pending bookings or an active paid plan need to be finished or cancelled before an account can be deleted.
9. Your Choices & Rights
Depending on where you live, data protection laws such as India's Digital Personal Data Protection Act, 2023 give you these rights:
See your information: Most of what we hold about you is visible in your dashboard. You can ask us for a copy of the rest.
Correct it: Update your details on your Profile page, or ask us to correct anything you cannot change yourself.
Delete your account: Use "Delete account" at the bottom of your Profile page, or email us. Section 8 explains what is kept.
Change your consent: Change your cookie choice any time with "Cookie Settings" at the bottom of every page. You decide which journal entries are shared with your therapist.
Raise a concern: Email us and we will respond as soon as we can, and within 30 days. You may also contact the data protection authority where you live, such as the Data Protection Board of India.
Clients under 18 need a parent or guardian's consent to use MLC. Session content stays confidential, apart from the safety limits in section 10.
10. Limits of Confidentiality
What you share in therapy stays between you and your therapist. In rare cases, a therapist may need to share information without your consent:
If there is a serious risk of harm to you or someone else.
If a child or vulnerable adult may be at risk.
If a court or the law requires it.
Your therapist will discuss these limits with you, and will share only what is necessary.
11. Changes & Contact
If we change this policy, we will update the date at the top and, for important changes, let you know by email or in your dashboard. For any question or request about your information, write to us:
Privacy & support
MLC Health and Wellness Centre