Privacy & your data

One Good Hour exists to connect you with a counsellor — not to monetise your data. We never sell data, never share it with advertisers, and never use it to train models. This page is our full privacy notice. One Good Hour is the data controller for it; write to [email protected] about anything here.

What we hold about you as a client: the email address, name and password you register with; the postcode or town you search from; your bookings, including which counsellor and when; anything you type into a booking note; and basic technical records (IP address, browser) kept briefly to keep the service secure. Our lawful basis for running your account and bookings is performance of a contract with you.

The fact that you have booked counselling is health-related information, which UK GDPR treats as special category data. We rely on Article 9(2)(h) — the provision of health or social care — and we hold as little of it as we can. We never ask you to describe your health to us, and a booking note is passed to your counsellor rather than analysed by us. Video sessions are end-to-end encrypted between the two devices — our server relays packets it holds no key for, stores none of them, and records nothing. Because the keys are exchanged through that same relay, each call also shows a four-word safety code: if it matches on both screens, that is cryptographic proof nobody is in the middle.

Who else sees it: the counsellor you book with (name, email, your booking and any note you sent them); our email provider Resend, which delivers our messages and is configured to the EU region; and Cloudflare, which sits in front of the site to keep it available. Servers are in the UK/EU and under our control. Nobody else receives your data, and we transfer none of it outside the UK/EEA except through those providers under standard contractual protections.

How long we keep it: your account and booking history for as long as your account exists, then deleted within 30 days of you closing it, except where we must keep a minimal financial record. Technical logs are kept for 30 days. Counsellors keep their own clinical records — those are theirs, not ours, and this notice does not cover them.

Your rights: you can ask for a copy of your data, correct it, delete it, restrict or object to how we use it, or take it elsewhere — email [email protected] and we will respond within one month. If we get it wrong you can complain to the Information Commissioner’s Office at ico.org.uk. If you are a counsellor, your public profile is data you publish yourself: you control it from your workspace and can remove it whenever you choose.

Questions about this page? Email [email protected].