Privacy Policy
Last updated: April 2026
1. Introduction
Ealho Therapy (operated by Ealho Technologies) is committed to protecting your personal information. This Privacy Policy explains how we collect, use, store, and protect your data when you use our platform.
We operate in compliance with the Nigeria Data Protection Act 2023 (NDPA) and the guidelines of the Nigeria Data Protection Commission (NDPC).
2. Information we collect
2.1 Information you provide directly
- Name, email address, phone number
- For therapists: professional qualifications, specializations, and practice details
- Payment information (processed securely by our payment provider — we never store card details)
- Session booking details and preferences
- Communications you send us
2.2 Session-related information
- Session audio is processed in real time and permanently deleted immediately after processing. We do not store audio recordings.
- Session transcripts are used solely to generate clinical notes and are permanently deleted once note generation is confirmed. Transcripts are never stored long-term.
- Clinical session notes are generated and stored securely. Notes are accessible only to the treating therapist and are protected by strict access controls.
- Session metadata (date, duration, session number) is retained for scheduling and clinical continuity.
2.3 Technical information
- Device type, browser, and IP address (for security and fraud prevention)
- Usage data to improve platform performance
3. How we use your information
We process your data for the following purposes:
- Providing therapy session scheduling and delivery
- Generating clinical documentation to support therapist workflow
- Processing payments for booked sessions
- Sending session confirmations and reminders
- Ensuring platform security and preventing fraud
- Complying with legal and regulatory obligations
- Improving our platform and services
Legal basis: We process your data based on your explicit consent given at the time of booking or registration, and where necessary for the performance of services you have requested.
4. Data storage and security
Your data is stored on secure cloud infrastructure with data centers located in the European Union. We use industry-standard security measures including:
- Data encryption at rest and in transit
- Strict access controls — staff access is limited to what is necessary for their role
- Regular security reviews
- Secure development practices
Clinical session notes are accessible only to your treating therapist. No other party — including Ealho staff — has access to the content of your session notes.
5. Data retention
We retain your data for the following periods:
| Data type | Retention period |
|---|---|
| Session audio | Deleted immediately after processing |
| Session transcripts | Deleted within minutes of note generation |
| Clinical session notes | Retained for 7 years (clinical standard) |
| Account information | While account is active + 2 years |
| Payment records | 7 years (statutory requirement) |
| Communication logs | 1 year |
You may request deletion of your account and associated data at any time (see Section 7). Note: clinical records may be retained longer where required by law or professional standards.
7. Your rights under the NDPA 2023
As a data subject under the Nigeria Data Protection Act 2023, you have the right to:
- Access: Request a copy of the data we hold about you
- Correction: Request correction of inaccurate data
- Deletion: Request deletion of your data (subject to legal retention requirements)
- Portability: Receive your data in a portable format
- Withdrawal of consent: Withdraw consent for processing at any time
- Objection: Object to certain types of processing
- Complaint: Lodge a complaint with the Nigeria Data Protection Commission (ndpc.gov.ng)
To exercise any of these rights, contact us at: privacy@ealho.com
We will respond to all requests within 30 days.
8. Anonymous sessions
We offer an anonymous booking option for clients who prefer additional privacy. When you book anonymously:
- You provide a chosen alias instead of your real name
- Your therapist sees only your alias and a session reference number
- Your real identity is never disclosed to your therapist unless you choose to share it
- Your email is used solely to deliver your session link and is handled with the same security as all other data
9. Children's data
Our platform is not intended for users under 18. We do not knowingly collect data from minors. If you believe a minor has registered, please contact us immediately.
10. Cross-border data transfers
Our infrastructure is located outside Nigeria. Where we transfer your data internationally, we ensure adequate protections are in place in accordance with the NDPA 2023, including contractual safeguards with our service providers.
11. Data breach notification
In the event of a data breach that poses a risk to your rights and freedoms, we will notify you and the Nigeria Data Protection Commission within 72 hours of becoming aware of the breach, as required by the NDPA 2023.
12. Changes to this policy
We may update this Privacy Policy from time to time. We will notify you of significant changes by email. Continued use of the platform after changes constitutes acceptance.
13. Contact us
For all privacy-related queries:
Email: privacy@ealho.com
Ealho Technologies Limited
Lagos, Nigeria