Privacy Policy
1. Introduction and scope
This Privacy Policy explains how GESA (Global Emotional Support Alliance) collects, uses, shares, and protects personal information when you visit our website or use our services. It applies to everyone who interacts with GESA online — people seeking support, volunteer therapists and emotional-support providers, donors, and visitors. By using GESA, you agree to the practices described here.
2. Who we are
GESA is a mission-driven, volunteer-powered alliance that connects people around the world with verified therapists and emotional-support specialists for free, trauma-informed care, delivered online in English. GESA is the data controller for the personal information described in this policy.
3. What data we collect
Account and profile information (name, email, preferred language, general region, areas of concern); contact and inquiry information; session-related information (that a session was requested/scheduled, timing, and limited coordination notes); usage and device data; and cookies/analytics identifiers. Please do not send more sensitive information than necessary to receive support.
4. How we use personal data
To provide and coordinate emotional-support services; match you with an appropriate provider; schedule and deliver sessions and support groups; respond to inquiries; operate, secure, and improve the platform; understand aggregate usage; prevent misuse; and meet legal obligations.
5. Legal bases for processing
Where the EU/UK GDPR or similar laws apply, we rely on consent (optional analytics/communications), performance of a service you request, legitimate interests (security and improvement), and legal obligation. For health- or emotion-related special-category data we rely on your explicit consent or another lawful basis. You may withdraw consent at any time.
6. Data sharing
We share data with the therapist/specialist you are matched with; with service providers (hosting, database, communications, analytics) under protective contracts; and for legal or safety reasons where required. We do not sell personal data, and we never use the content of support conversations for advertising.
7. International transfers
GESA operates globally, so your information may be processed outside your country. Where we transfer data internationally, we use appropriate safeguards (such as adequacy decisions or standard contractual clauses).
8. Data retention
We keep personal data only as long as necessary to provide support, meet legal/accounting/safety obligations, and resolve disputes, after which we delete or anonymize it.
9. Your rights
Depending on your location you may access, correct, delete, restrict, or object to processing, withdraw consent, and request portability. Contact us to exercise any right; you may also complain to your local data-protection authority.
10. Children and minors
GESA's services are intended for adults 18 and older. We do not knowingly collect data from minors except where a specific program explicitly permits it with verified guardian consent and safeguards.
11. Security measures
We use encryption in transit, access controls and role-based permissions, restricted access to session information, and ongoing monitoring. No system is perfectly secure, but we work continuously to protect your data.
12. Updates to this policy
We may update this policy; the revised version appears here with a new "last updated" date, and we notify you of significant changes where appropriate.
13. Contact us about privacy
Email [privacy@gesa.org] or write to [GESA registered address]. Data-protection contact: [name / role / email].