Privacy Policy

Healing Aura Resonance Therapy and Wellness Services (“Healing Aura,” “we,” “us,” or “our”), is a private counseling and psychology practice based in Nairobi, Kenya. We are the data controller responsible for the personal data described in this policy.
Contact details:

• Email: [email protected]
  Phone / WhatsApp: +254 119 124 386

This policy explains how we collect, use, share, and protect personal data when you visit our website, contact us through our booking or contact form, message us on WhatsApp, email us, or become a client of Healing Aura Resonance Therapy and Wellness Services, including when we advertise our services on Meta platforms (Facebook and Instagram).

3.1 Ordinary personal data

• Name, phone number, and email address
• Messages you send us via our website form, WhatsApp, or email
• Technical data from your visit to our website (see Section 6, Cookies & Advertising)

3.2 Sensitive personal data (special category)
Because we provide mental health and counseling services, some of the information you share with us is classified as sensitive personal data under the Data Protection Act, 2019 including information about your mental and physical health, and any details revealing your family circumstances, relationships, or other sensitive matters you disclose during intake or sessions. This includes:

• Intake form responses (collected via our website/booking form)
• Session notes, treatment plans, and clinical records
• Information about your mental health history, diagnoses, and presenting concerns

We only collect sensitive personal data with your explicit, informed consent, obtained separately through our intake and informed consent process before or at the start of therapy.

• Directly from you, when you fill in our website contact or booking form
• Directly from you, when you message us on WhatsApp Business
• Directly from you, when you email us
• Directly from you, during intake, informed consent, and therapy sessions
• Automatically, through cookies and similar technology when you visit our website or interact with our Meta (Facebook/Instagram) ads — see Section 6

Our website uses cookies and similar technologies to help it function and to understand how visitors use it. As we advertise on Facebook and Instagram, we use the Meta Pixel (and/or Meta Conversions API) on our website. This technology collects information about your visit such as pages viewed and actions taken and shares it with Meta Platforms, Inc. to measure the performance of our ads and, where enabled, to show our ads to people likely to be interested in our services.

• Meta processes this data under its own privacy policy, available at facebook.com/privacy/policy
• We do not use the Meta Pixel to target advertising based on your health status, and our ads will not suggest
that we know anything about your personal mental health
• You can control cookies through your browser settings, and can manage the ads you see from us through your Facebook/Instagram ad preferences
• Where required, we will display a cookie consent banner on our website allowing you to accept or decline non-essential cookies

Some of the tools we use (including Google, Meta/WhatsApp, and any web hosting or form providers listed above) store or process data on servers located outside Kenya. Where this happens, we take reasonable steps to
ensure the receiving party provides an adequate level of protection for your data, consistent with the Page 2 of 4 requirements of the Data Protection Act, 2019, including relying on the data protection safeguards those providers have in place.

We retain clinical records and session notes for as long as is necessary to provide your care and to meet our professional and legal obligations, and in line with recognised professional retention standards for counseling records. General enquiry and marketing data is retained only as long as needed for the purpose it was collected, or until you ask us to delete it.

• Access to client records is limited to practitioners directly involved in your care
• Clinical records and communications are treated as confidential in line with our professional and ethical
obligations
• We use reasonable technical and organisational measures (such as password-protected systems) to guard
against unauthorised access, loss, or disclosure
• We will notify affected clients and the ODPC of any data breach likely to result in risk to your rights, as
required by law

Under the Data Protection Act, 2019, you have the right to:
• Be informed of how your data is being used
• Access the personal data we hold about you
• Request correction of inaccurate or outdated data
• Request deletion of your data, subject to our legal and professional record-keeping obligations
• Object to or restrict certain processing, including marketing
• Request a copy of your data in a portable format
• Withdraw consent at any time, without affecting processing carried out before withdrawal
To exercise any of these rights, contact us at [email protected] or +254 119 124 386. We will respond
within the timeframes required by law.

Our services and website are intended for adults. Where we work with minors, this is only with the involvement and consent of a parent or legal guardian, in line with our professional and ethical obligations.

We may update this policy from time to time to reflect changes in our practices or legal requirements. The “Last
reviewed” date at the top of this policy shows when it was last updated. Significant changes will be communicated to clients directly where appropriate.

If you have any questions about this policy or how we handle your data, please reach out:
• Email: [email protected]
• Phone / WhatsApp: +254 119 124 386
Website: https://healingaura.co.ke