Privacy Policy

We take your privacy seriously, especially because a request for therapy can include information about your health or your family. This policy explains what we collect through unison-health.com, why we collect it, how long we keep it and what you can do about it. It follows the EU General Data Protection Regulation (GDPR) and Spain’s data protection law (Organic Law 3/2018, LOPDGDD).

Who is responsible for your data

The data controller is UnisonHealth S.L. (trade name: Unison Health).

• Tax ID (CIF): B56503808
• Registered office: Avenida de Italia 11, 8, 41012 Seville, Spain
• Email: unisoncontact@unison-health.com

For any question about this policy or about your data, write to us at that email address.

What data we collect

We only collect the data you choose to send us.

Appointment request form

On the home page, Contact, About Us, the Q&A and each of our service pages: name, email, phone, your preferred day and time (optional) and anything you decide to tell us about how we can help (optional).

Emails

If you email us, we receive your email address and whatever you include in your message.

What we record automatically

With each form we also record the page you sent it from and the date and time you gave your consent. To stop automated abuse, we keep a coded version of your IP address (a one-way hash, never the address itself) for about ten minutes. Like any website, the servers of our hosting provider keep technical logs (IP address, date, page requested and browser) for security.

The fields marked with an asterisk are required: without them we cannot reply to your request.

Information about your health

Your request may reveal information about your health or the health of a family member, for example the program you ask about or what you tell us in your message. Health data is a special category of personal data, so we only process it with your explicit consent, which you give by ticking the consent box before you send the form (Article 9(2)(a) GDPR).

Please share only what we need to arrange your first appointment: you can talk about everything else with your therapist or psychiatrist. If you become a patient, your clinical records are handled under the health care rules that apply to them, and we will inform you about them separately.

The form is not for emergencies. If you are in danger or need urgent help, call 112 (Spain and the rest of the EU). In Spain you can also call 024, the free, confidential, 24-hour suicide prevention line.

Why we use your data and on what legal basis

• To answer your appointment request, match you or your family member with a psychologist or psychiatrist and help you check your insurance coverage. Legal basis: your consent and the steps you ask us to take before starting care (Article 6(1)(a) and (b) GDPR); for health data, your explicit consent (Article 9(2)(a)).
• To reply to your emails. Legal basis: your consent, given when you write to us (Article 6(1)(a)).
• To keep the website and its form secure and prevent spam and abuse. Legal basis: our legitimate interest in protecting the website and the people who use it (Article 6(1)(f)).

We do not use your data for advertising, we do not send newsletters, we do not sell your data, and we do not make automated decisions or profiles about you.

Who we share your data with

• Our team: the people at Unison Health who handle your request, all bound by confidentiality.
• Your insurance company, only if you ask us to verify your coverage or to submit a claim for you.
• Our service providers (data processors), who process data on our behalf, under contract and only following our instructions: website hosting (GoDaddy, with servers in the European Union) and email (Zoho, with servers in the European Union). If you become a patient, card payments for your appointments are processed by Stripe, as explained in our Appointment Policy.
• Public authorities, courts or security forces, only when the law requires it.

International transfers

We store your data in the European Union. Some of our providers belong to groups based outside the European Economic Area: if they ever need to access data from outside it, they must do so with the safeguards required by the GDPR, such as a European Commission adequacy decision or the Standard Contractual Clauses.

How long we keep your data

• Form messages and the emails about your request: we delete them 12 months after we receive them. Messages stored on the website are deleted automatically.
• If you become a patient: your clinical records are kept for the period required by health care law.
• Coded IP address: about ten minutes.

After these periods, we only keep data blocked where the law requires it, to deal with possible legal claims.

Your rights

You can ask us at any time to:

• access the data we hold about you;
• correct data that is inaccurate;
• delete your data;
• object to its use, or restrict it;
• receive your data in a portable format;
• withdraw your consent, without affecting what we did before you withdrew it.

Email unisoncontact@unison-health.com with the subject “Data protection”, from the address you used or telling us which address it was. We will answer within one month. Exercising your rights is free.

If you think we have not handled your data properly, you can file a complaint with the Spanish Data Protection Agency (Agencia Española de Protección de Datos, AEPD): www.aepd.es, C/ Jorge Juan 6, 28001 Madrid, Spain.

Children and minors

Our form is for people aged 14 or over: in Spain, people aged 14 or over can consent to the use of their personal data themselves (Article 7 LOPDGDD). If you are under 14, a parent or legal guardian must contact us on your behalf. When parents or guardians ask us about care for their child, they give us their child’s details as the child’s legal representatives.

How we protect your data

The website only works over an encrypted connection (HTTPS). Form messages are stored in a private area of the website that only our administrators can open, and a copy is sent to our contact inbox so we can reply to you quickly. IP addresses are never stored in readable form, and old messages are deleted automatically. Email is not end-to-end encrypted, so please do not send detailed clinical information through the form or by email.

Cookies

Browsing this website does not set any cookies. See our Cookie Policy for the details.

Changes to this policy

We may update this policy when the law or our services change. The date at the top of the page shows the latest version. See also our Legal Notice.