TL;DR: For site visitors, we do not use any non-essential cookies and we do not collect any personal data.
If you decide to create an account, we require you to provide the bare minimum and only share it with services that are absolutely necessary for the app to function.
Where we ask for optional data such as feedback, mental health or mood surveys, these data are collected so that we can improve the services we provide, and they may be anonymised and shared with our academic partners who are also working with us to improve the service. We are not a crisis service, however if you provide your mobile number, and we think you are in immediate danger, one of our team may contact you, or we may pass this number to the emergency services. However this is the only time we will use this information, and you do not have to provide it to us to use the service.
We will never sell your data and nor will any of the services we work with.
When you sign up to our mailing or waiting list, we use SendFox to store that information. They keep it securely so that only we have access to it, and they do not sell or share it (except with us). You can find out more about SendFox here.
When you visit our blog or the home page, we are not collecting any personal data. We do not use Google Analytics. We use Plausible Analytics and they are privacy focused and data about how many page visits and other interactions are completely anonymous. You can learn more about them here.
Central to our mission is our commitment to be transparent about the data we collect about you, how it is used and with whom it is shared.
Definitions and interpretation
collectively all information that you submit to Kalda Health via the Website. This definition incorporates, where applicable, the definitions provided in the Data Protection Laws.
a small text file placed on your computer by this Website when you visit certain parts of the Website and/or when you use certain features of the Website. Details of the cookies used by this Website are set out in the clause below (Cookies);
Data Protection Laws
any applicable law relating to the processing of personal Data, including but not limited to the Directive 96/46/EC (Data Protection Directive) or the GDPR, and any national implementing laws, regulations and secondary legislation, for as long as the GDPR is effective in the UK;
the General Data Protection Regulation (EU) 2016/679;
Kalda or Kalda Health, we or us
Kalda a company pending corporation in England and Wales;
UK and EU Cookie Law
the Privacy and Electronic Communications (EC Directive) Regulations 2003 as amended by the Privacy and Electronic Communications (EC Directive) (Amendment) Regulations 2011;
User or you
any third party that accesses the Website and is not either (i) employed by Kalda and acting in the course of their employment or (ii) engaged as a consultant or otherwise providing services to Kalda and accessing the Website in connection with the provision of such services;
the website that you are currently using, Kalda.app, and any sub-domains of this site unless expressly excluded by their own terms and conditions.
Kalda Limited (“Kalda”/“we”/”us”) intends to create a platform for people to access group therapy in an affordable way. We will never sell your data. We aim to partner with academics, psychologists and scientists in order to make sure that we are improving the mental wellness of our users and for this reason, your feedback, your progress and your usage of our product may be anonymised and used to inform academic research and our product development. If we undertake the creating of the product, we will inform you before we use any anonymous data generated by you in this way, giving you the opportunity to opt out.
Services and Website
1. Data we collect and how we collect it
1.1 Data you provide to us
To create an account you will need to provide data including your name, email address, and a password. Optionally you can provide us with your mobile number.
On sign up you will also be invited to complete a health questionnaire. We may share this data with our group therapist, so that they can tailor the sessions for you needs. We may also use this data anonymously to understand what effect Kalda is having on health outcomes. We may publish this data in journals and articles.
1.2 Posting and uploading
We collect personal data from you when you provide, post or upload it to our Services and/or our Websites, such as when you fill out a form (e.g. contact us or progress/wellbeing forms) or when you submit any feedback
1.3 Service use
1.4 Cookies, identifiers and other similar technologies
1.5 Your device and location
When you visit or leave our Services (including our plugins or cookies or similar technology on the sites of others), we receive the URL of both the site you came from and where you go next. We also get information about your IP address, proxy server, operating system, web browser and add-ons. However, unless you log in, we have no way of connecting this data to you, it is completely anonymous.
We collect information about you when you send, receive, or engage with messages in connection with our Services. For example, if you use the contact us page on our Websites or if you email our sales or support teams.
1.7 Other sources of information
We may obtain your name and email address from a User of our Services if they wish to connect you with our Services.
2. How we use your data
We use the data that we have about you to provide and personalise our Services so that they can be more relevant and useful to you and enable you to use our Services and/or to access and use certain functions on our Website.
Kalda is not a crisis service but if, during your interaction with our platform, we become concerned for your immediate safety we may use your mobile number and personal data to pass on to the emergency services. This will only be done if you are thought to be at imminent risk of suicide. You do not have to give us your mobile number in order to use the service.
We collect health questionnaire data for two reasons:
So that we can ensure that group therapy sessions are tailored for your needs.
So that we can evaluate the effectiveness of Kalda.
We may share anonymous health data with academic partners, and publish it in articles and journals.
We use your data to authorise access to our Services and to manage your account. Our Services allow you to collaborate with peers or other users of our Services and our support staff. Our Services allow you to track your personal progress and usage.
We may use the personal data you provide to communicate with you. This may include responding to emails or calls from you. We will send you messages about the availability of our Services, security, features, or other service-related issues. We also send messages about how to use the Services, updates, and reminders.
With your permission and/or where permitted by law, we may also use your personal data for our marketing purposes, which may include contacting you by email and/or text message and/or telephone and/or post with information news and offers on our Services or services similar to the Services. You will not be sent any unlawful marketing or spam and you will always have the opportunity to opt out. You can opt out at any time by contacting us at firstname.lastname@example.org or by updating your preferences. We use data, including your feedback, to further develop our Services in order to provide our Users with a better, richer experience when using our Services.
2.4 Customer support
We use data (which can include your communications via our telephone and email) needed to investigate, respond to and resolve any queries you may have with our Services as well as to identify Service issues (e.g., bugs, exceptions).
2.5 Security and investigations
3. How we share information
We do not share your personal data with any third parties for marketing purposes.
3.2 Service providers
We use third parties to provide our Services (e.g. maintenance, analysis, audit, payments, hosting, marketing). They may have access to your information as reasonably necessary to perform these tasks on our behalf and are obligated to not disclose or use it for other purposes. We will take steps to ensure that your personal data is handled safely, securely and in accordance with your rights, our obligations and the third parties’ obligations under the law. If any personal data is transferred outside of the EEA, we will take suitable steps in order to ensure that your personal data is treated just as safely and securely as it would be within the UK and under the GDPR.
3.3 Change in control or sale of our business
3.4 Legal disclosure
It is possible that we will need to disclose information about you when required by law, or other legal process or if we have a good faith belief that disclosure is reasonably necessary to (1) investigate, prevent, or take action regarding suspected or actual illegal activities or to assist government enforcement agencies; (2) enforce our agreements with you, (3) investigate and defend ourselves against any third-party claims or allegations, (4) protect the security or integrity of our Service (such as by sharing with companies facing similar threats); or (5) exercise or protect the rights and safety of Kalda Limited our Users, personnel, or others. We attempt to notify Users about legal demands for their personal data when appropriate in our judgment, unless prohibited by law or court order or when the request is an emergency.
4. Your data and choices
4.1 Data retention
We retain the personal data you provide while your account is in existence or as needed to provide you with the Services. We will retain your information and keep your profile open until you decide to inform us you wish to close your account. In some cases we will retain certain information (e.g., Campaigns and Rights holders) in a depersonalized or aggregated form to fulfil our obligations with your current/then employer and to comply with the law.
4.2 Right to be informed about our collection and use of your personal data:
4.3 Right to access your personal data:
you may request a report of the personal data we have about you. The request should be made in writing and sent to email@example.com. There is not normally any charge for such a request unless the request is manifestly unfounded or excessive (for example, you make repetitive requests), in which case a fee may be charged to cover our administrative costs. We will keep you informed of the progress of your request.
4.4 You also have the following rights.
Right to have your personal data rectified if any of your personal data held by us is inaccurate or incomplete. You may also amend your details in settings or by contacting firstname.lastname@example.org.
Right to be forgotten ie the right to ask us to delete or otherwise dispose of any of your personal data that we have.
Right to restrict (ie prevent) the processing of your personal data.
Right to object to us using your personal data for a particular purposes or purposes.
Right to data portability. this means that if you have provided personal data to us directly or we are using it with your consent or for the performance of the Services and that data is processed using automated means, you an ask us for a copy of that personal data to re-use with other supplier.
Please contact us at email@example.com if you wish to exercise any of these rights or to find out more about them.
4.5 Account closure
We retain your personal data even after you have closed your account if reasonably necessary to comply with our legal obligations (including law enforcement requests and contracts with your employer), meet regulatory or contractual requirements, resolve disputes, maintain security, prevent fraud and abuse, enforce our User Agreement, or fulfil your request to “unsubscribe” from further messages from us.
5. How and where do we store or transfer personal data
We may store or transfer some or all of your personal data in countries that are not part of the European Economic Area (“EEA”). These countries may not have data protection laws that are as strong as those in the UK and/or the EEA. This means that we will take additional steps in order to ensure that your personal data is treated just as safely and securely as it would be within the UK and under the GDPR as follows:
Where we share your data with external third parties we will enter into contracts with those parties which ensure that the same levels of personal data protection that would apply under the GDPR; and where we transfer your data to a third party based in the US, this may be protected if that third party is part of the EU-US or Swiss-US Privacy Shields. These require that third party to provide data protection to standards similar to those in the EEA.
The security of your personal data is essential to us and to protect your data we take a number of important measures including the following: We implement security safeguards designed to protect your data, such as HTTPS. We regularly monitor our systems for possible vulnerabilities and attacks.
6. Contact information
*We don’t share your email address with anyone else. You will always be able to opt-out of our mailing list.