Privacy Policy
Last updated: October 7, 2026
At Therapy Theo, we respect your privacy and are committed to protecting your personal data. This Privacy Policy explains how we collect, use, store, and protect personal data when you visit or use http://www.therapytheo.com (the “Website”).
This Privacy Policy applies to visitors, registered users, and individuals who upload, access, or otherwise interact with content on the Website.
1. Who We Are
The data controller responsible for your personal data is:
Company Name: OÜ Tegevushaldjas
Registry Code: 16446608
Country: Estonia
E-mail: theoandtherapy@gmail.com
If you have any questions about how your personal data is processed, please contact us using the email address above.
2. What Personal Data We Collect
Depending on how you use the Website, we may collect the following categories of personal data:
– Account information
When you create an account, we may collect information such as:
- name or username;
- email address;
- password or authentication information;
- profile information that you choose to provide;
- account and registration details.
– Uploaded materials
If you upload study materials to the Website, we process the information contained in those materials as well as related information such as:
- the title and description of the material;
- category and subject;
- the uploaded file;
- information associated with your account;
- information about the date and time of the upload.
Please do not upload personal, confidential, medical, patient, student, or other sensitive information relating to identifiable individuals.
– Communications
If you contact us, we may process your name, email address, message, and any other information you choose to provide.
– Technical and usage information
When you use the Website, certain technical information may be collected automatically, such as:
- IP address;
- browser and device information;
- operating system;
- date and time of access;
- pages visited and interactions with the Website;
- information necessary for website security and functionality.
3. How We Use Your Personal Data
We may process your personal data for the following purposes:
- to create and manage your user account;
- to provide and operate the Website;
- to allow users to upload, access, search, and download study materials;
- to process and manage uploaded materials;
- to communicate with you regarding your account or uploaded materials;
- to process payments and earnings where applicable;
- to prevent fraud, misuse, and security incidents;
- to maintain and improve the Website;
- to provide customer support;
- to comply with legal and regulatory obligations;
- to protect our legal rights and enforce our Terms of Use.
We will not use your personal data for purposes that are incompatible with the purposes described in this Privacy Policy unless required or permitted by law.
4. Legal Bases for Processing
Depending on the circumstances, we process personal data on the following legal bases under the GDPR:
– Performance of a contract – where processing is necessary to provide you with an account or services you have requested;
– Legal obligation – where we are required to process information to comply with applicable laws;
- Legitimate interests – where processing is necessary for purposes such as website security, fraud prevention, service improvement, and protecting our legal rights, provided that these interests do not override your fundamental rights and freedoms;
- Consent – where we ask for your consent, such as for certain optional cookies or marketing communications.
Where processing is based on consent, you may withdraw your consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.
5. Uploaded Materials and Personal Data
TherapyTheo is a platform for sharing professional and educational materials. Users are responsible for ensuring that materials they upload do not contain personal data or confidential information about other individuals unless they have a lawful basis and appropriate permission to share that information.
In particular, users should not upload materials containing identifiable patient information, student information, client information, medical records, or other confidential information.
If you believe that a material published on the Website contains personal data that should not have been shared, please contact us at theoandtherapy@gmail.com.
6. Sharing of Personal Data
We may share personal data with trusted service providers where this is necessary to operate the Website. These may include providers of:
- website hosting and infrastructure;
- email delivery;
- payment processing;
- website security;
- analytics and performance services;
- technical and customer support.
These providers may process personal data only as necessary to provide their services and, where required by law, under appropriate contractual arrangements.
We may also disclose personal data:
- where required by law;
- to comply with a valid legal request;
- to protect the rights, property, or safety of Therapy Theo, our users, or others;
- in connection with a merger, acquisition, restructuring, or transfer of the business, where legally permitted.
We do not sell your personal data.
7. Payments and Earnings
If the Website allows users to earn money from uploaded materials, payments may be processed through third-party payment providers.
When you use a payment service, your payment information may be processed directly by the relevant payment provider in accordance with its own privacy policy.
Payments on our website are processed through WooPayments. Depending on the payment method used, payment transactions may be processed by WooPayments and its underlying payment service providers. We may receive information necessary to process payments, manage transactions, refunds, and earnings, but we do not store customers’ full payment card details on our website.
We recommend that you review the privacy policy of the relevant payment provider before using its services.
8. Cookies
The Website may use cookies and similar technologies to ensure that the Website functions correctly, remember user preferences, maintain user sessions, improve security, and understand how the Website is used.
Some cookies may be necessary for the operation of the Website, while others may be optional.
Where required by applicable law, we will ask for your consent before placing non-essential cookies on your device.
You can manage or disable cookies through your browser settings and, where applicable, through our cookie consent mechanism.
9. Third-Party Services
The Website may use third-party services and integrations. These services may process certain personal data on our behalf or independently.
Such services may include hosting providers, payment providers, email providers, analytics services, security services, and authentication providers.
Third-party services operate according to their own terms and privacy policies.
10. International Data Transfers
Some of our service providers may process personal data outside the European Economic Area (EEA).
Where personal data is transferred outside the EEA, we will take appropriate measures to ensure that the transfer is carried out in accordance with applicable data protection law, including, where applicable, the use of adequacy decisions, Standard Contractual Clauses, or other lawful transfer mechanisms.
11. How Long We Keep Personal Data
We retain personal data only for as long as necessary for the purposes described in this Privacy Policy, unless a longer retention period is required by law.
For example:
- account information may be retained while your account remains active;
- information necessary for legal or accounting purposes may be retained for the period required by applicable law;
- communications may be retained for as long as necessary to handle the relevant request or dispute;
- technical and security information may be retained for a reasonable period necessary to maintain the security and functionality of the Website.
When personal data is no longer required, it will be deleted or anonymised where reasonably possible.
12. Data Security
We take reasonable technical and organisational measures to protect personal data against unauthorised access, loss, misuse, alteration, disclosure, or destruction.
However, no online service can guarantee absolute security. You should therefore use strong passwords, keep your login information confidential, and notify us if you suspect unauthorised access to your account.
13. Your Rights
Under the GDPR, you may have the following rights in relation to your personal data:
- the right to receive information about how your personal data is processed;
- the right to access your personal data;
- the right to correct inaccurate or incomplete personal data;
- the right to request deletion of your personal data;
- the right to request restriction of processing;
- the right to object to certain processing;
- the right to data portability, where applicable;
- the right to withdraw consent where processing is based on consent;
- the right not to be subject to a decision based solely on automated processing where applicable.
These rights are subject to certain legal conditions and exceptions. To exercise your rights, contact us at theoandtherapy@gmail.com.
We may need to verify your identity before fulfilling certain requests.
14. Complaints
If you believe that your personal data has been processed unlawfully, we encourage you to contact us first so that we can investigate and address your concern.
You also have the right to lodge a complaint with the relevant data protection supervisory authority.
If you are located in Estonia, you may contact the Estonian Data Protection Inspectorate (Andmekaitse Inspektsioon).
15. Children’s Privacy
The Website is intended for students and professionals and is not directed at children.
We do not knowingly collect personal data from children where such collection is prohibited by applicable law. If you believe that a child has provided us with personal data without the necessary consent, please contact us.
16. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes to the Website, our services, legal requirements, or our data processing practices.
The latest version will always be published on this page, together with the date of the most recent update.
17. Contact Us
If you have any questions about this Privacy Policy or how we process personal data, please contact us:
TherapyTheo
Email: theoandtherapy@gmail.com
Website: www.therapytheo.com