Privacy Policy

At Bliss, we take your privacy seriously and are committed to protecting your personal data in accordance with the EU General Data Protection Regulation (GDPR) 2016/679 and the Finnish Data Protection Act (Tietosuojalaki 1050/2018). This policy explains how we collect, use, store, and protect your personal information and sets out your rights as a data subject.

We collect account and contact details, booking and payment information, and information you choose to provide during matching or communication with a therapist. Matching answers and messages may reveal information about mental health or other sensitive circumstances. We store matching answers from the first submitted answer after the matching disclosure step, including when you have not yet created an account.

We process account and booking information to provide the service, communications and support to respond to you, and records required by law. Optional PostHog product measurement, Google Analytics and Google Ads ad-click and purchase measurement, and Meta advertising activate only after your tracking choice is recorded. With that choice, Google may use ad-click identifiers and purchase event details to measure ads; we do not enable personalized Google advertising or send our internal user ID to Google. Before AI matching, we ask for separate explicit consent to process answers that may reveal sensitive information. You can browse therapists without providing matching answers.

Personal information may be collected through:

• Platform registration;
• Completing online forms;
• Communications via email, phone, or other communication platforms;
• Services provided during online therapy sessions.

Your personal data will be used for the following purposes:

• To provide and improve our services;
• To communicate with you;
• To conduct statistical analysis and research;
• To ensure platform protection and security;
• To fulfil legal and regulatory obligations;
• To verify identity;
• To monitor and improve the services we offer.

Retention depends on the purpose and applicable legal requirements. Account, booking, financial, support, matching and consent records may have different periods. Contact Bliss for the current retention schedule or to request deletion where available.

We use service providers for hosting, payments, email, video sessions, AI features, operational monitoring and, when you choose optional tracking, analytics and advertising.

We use various measures to protect your personal information, including:

• Data encryption;
• Restricted access to your personal information;
• Continuous monitoring of our systems to prevent and detect any unauthorised access.

Essential storage keeps the platform working. PostHog product measurement, Google Analytics and Google Ads measurement, and Meta advertising require your prior optional choice. You can review or withdraw that choice at any time using the Privacy settings control on Bliss. A withdrawal stops optional browser capture and clears supported browser identifiers.

Some service providers may process data outside the European Economic Area. Contact Bliss for information about the transfer safeguards and processing location that apply to your data.

Under GDPR, you have the following rights regarding your personal data:

• The right of access (Art. 15) — to obtain a copy of your personal data we hold;
• The right to rectification (Art. 16) — to correct inaccurate or incomplete data;
• The right to erasure (Art. 17) — to request deletion of your data where no overriding legal basis applies;
• The right to restriction of processing (Art. 18) — to limit how we use your data in certain circumstances;
• The right to data portability (Art. 20) — to receive your data in a structured, commonly used, machine-readable format;
• The right to object (Art. 21) — to object to processing based on legitimate interest or carried out for direct marketing;
• The right to withdraw consent (Art. 7(3)) — to withdraw consent at any time without affecting the lawfulness of processing carried out prior to withdrawal;
• Rights related to automated decision-making (Art. 22) — to not be subject to decisions based solely on automated processing that produce significant legal or similarly significant effects.

To exercise any of these rights, please contact us at info@bliss.al.

You have the right to lodge a complaint with the competent supervisory authority at any time. The supervisory authority for Finland is:

• Finnish Data Protection Ombudsman (Tietosuojavaltuutettu);
• Website: tietosuoja.fi;
• Email: tietosuoja@om.fi;
• Phone: +358 29 566 6700;
• Address: PO Box 800, FI-00531 Helsinki, Finland.

We may update this privacy policy from time to time to reflect changes in our practices or applicable law. We will notify you of any significant changes through our platform or by email.

If you have questions or concerns about this privacy policy or how we handle your personal data, please contact us at: Bliss, Laukkaniementie 1, 00200 Helsinki, Finland. Email: info@bliss.al.

This Privacy Policy is reviewed periodically and updated to reflect changes in our practices or applicable law. Where changes are material, we will notify you by email or through the platform before they take effect.