Privacy Policy

Account information you provide: your name, work email address, and the employer activation code used to verify eligibility. If you book a session we also store the appointment time and the therapist you chose.

Clinical information is held separately by your therapist under professional record-keeping obligations. Aurelia staff cannot browse session notes.

Employers receive aggregated, anonymised statistics only — such as the total number of sessions delivered organisation-wide in a quarter. Reports are suppressed entirely where numbers are small enough that an individual could be inferred.

Your employer is never told whether you have an account, whether you have booked, or what you discussed.

We process account data to perform our contract with you, and clinical data on the basis of the provision of health care by professionals bound by confidentiality obligations.

Account data is retained for the duration of your access plus 12 months. Clinical records are retained by your therapist for the period their professional body requires.

Data is encrypted in transit and at rest, hosted within the European Union, and access is restricted on a strict need-to-know basis with full audit logging.

You may request access to, correction of, or deletion of your personal data, and you may object to certain processing. Write to privacy@aureliawellbeing.com and we will respond within 30 days.