Privacy Policy

Last updated: 24 July 2026

​

The Flow & Flourish Practice respects your privacy and is committed to protecting the personal data entrusted to us.

​

This Privacy Policy explains how we collect, use, disclose, store, and protect personal data when you visit our website, complete one of our wellbeing quizzes, submit an enquiry, book a consultation, use our services, or otherwise communicate with us.

This policy is intended to comply with Singapore’s Personal Data Protection Act 2012 (“PDPA”) and other applicable requirements.

​

1. About Us

The Flow & Flourish Practice is a Singapore-based practice providing play therapy, parent consultations, assessments, group services, school collaboration, and related support for children, teenagers, and families.

​

For the purposes of this Privacy Policy, “the Practice”, “we”, “us”, and “our” refer to The Flow & Flourish Practice.

​

2. Personal Data We May Collect

Depending on how you interact with us, we may collect personal data including:

• your name and contact details;

• your email address and telephone or WhatsApp number;

• your country of residence;

• your preferred method and time of contact;

• your child’s or teenager’s name, age, date of birth, and other identifying details;

• information about your relationship to the child or teenager;

• responses submitted through our child or teen wellbeing quizzes;

• information about emotional, behavioural, developmental, educational, family, or social concerns;

• relevant health, therapy, developmental, school, or family history;

• appointment, consultation, attendance, payment, and service records;

• communications between you and the Practice;

• feedback, testimonials, or survey responses;

• website usage information, such as your IP address, browser type, device information, pages visited, and cookie data; and

• any other information you voluntarily provide to us.

 

We encourage you not to include unnecessary or highly sensitive information in general website enquiry forms.

​

3. Children’s and Teenagers’ Personal Data

Our services relate primarily to children and teenagers. In most cases, personal data about a child or teenager is provided by their parent, legal guardian, or authorised caregiver.

​

By providing information about a child or teenager, you confirm that you have the authority to provide that information and, where required, consent to its collection, use, and disclosure.

​

Where appropriate, we may also explain privacy and confidentiality to a child or teenager in a manner suited to their age, maturity, and level of understanding.

We seek to collect only the information reasonably required to understand the family’s enquiry, assess suitability for services, provide therapy or related support, and fulfil our professional responsibilities.

​

4. How We Collect Personal Data

We may collect personal data when you:

• visit or interact with our website;

• complete a child or teen wellbeing quiz;

• submit a contact or enquiry form;

• consent to being contacted;

• book a free consultation or paid parent assessment;

• communicate with us by email, telephone, WhatsApp, social media, or another channel;

• register for or participate in therapy, consultations, workshops, groups, or events;

• provide documents, reports, assessments, or school information;

• make payment for our services;

• interact with a school, healthcare professional, therapist, or other professional who is authorised to communicate with us; or

• provide information to us through another authorised person.

 

We may also receive personal data from schools, healthcare providers, therapists, caregivers, referral partners, or other professionals where you have authorised the disclosure or where otherwise permitted by law.

​

5. Purposes for Which We Use Personal Data

We may collect, use, and disclose personal data for purposes including:

• responding to enquiries and requests;

• contacting you after you have submitted a quiz or contact form;

• arranging free parent consultations, paid assessments, and appointments;

• assessing whether our services may be suitable;

• providing play therapy, consultations, parent support, group services, or school collaboration;

• developing and reviewing therapy plans;

• communicating with parents, caregivers, schools, and authorised professionals;

• maintaining therapy, attendance, consultation, and administrative records;

• processing invoices, payments, refunds, and financial records;

• managing scheduling, cancellations, reminders, and follow-up communication;

• monitoring service quality and improving our services;

• responding to feedback, complaints, or concerns;

• complying with professional, ethical, safeguarding, insurance, accounting, legal, and regulatory obligations;

• protecting the safety, rights, and wellbeing of clients, families, staff, and others;

• investigating suspected fraud, misuse, security incidents, or unlawful activity;

• administering and improving our website;

• analysing website usage and performance; and

• sending resources, newsletters, or promotional communications where you have separately consented or where otherwise permitted by law.

 

We will not use personal data for a materially different purpose without notifying you and obtaining consent where required.

​

6. Wellbeing Quizzes

Our child and teen wellbeing quizzes are designed to help parents and caregivers reflect on emotional, behavioural, social, or developmental concerns.

​

The quizzes are for informational and reflective purposes only. They do not provide a diagnosis, clinical assessment, medical advice, or emergency support and should not replace an assessment by a qualified healthcare or mental health professional.

​

Where you submit your contact information and consent to being contacted, Fecha or another authorised member of the Practice may contact you to discuss your concerns, quiz responses, and possible next steps.

​

Submitting a quiz or enquiry form does not create a therapist–client relationship or guarantee that services will be offered.

​

7. Consent

We generally collect, use, or disclose personal data with your consent, where consent is deemed under applicable law, or where another legal exception applies.

​

When you submit an enquiry or quiz form and select the consent checkbox, you consent to the Practice collecting and using the information provided to contact you about your enquiry, concerns, consultation, assessment, or suitable support options.

Consent to receive newsletters, resources, or promotional messages will be requested separately and will not be made a condition of submitting a therapy-related enquiry.

You may withdraw your consent by contacting us using the details below. Withdrawal will not affect any collection, use, or disclosure that occurred before we received and processed your request.

​

Please note that withdrawing consent may affect our ability to respond to your enquiry, continue providing services, maintain certain records, or fulfil our professional and legal obligations.

​

8. Disclosure of Personal Data

We may disclose personal data to parties including:

• therapists, employees, contractors, or authorised representatives of the Practice;

• schools, teachers, counsellors, healthcare professionals, or other professionals involved in supporting your child, where authorised or otherwise permitted;

• website hosting, scheduling, form, cloud-storage, communications, analytics, information-technology, and administrative service providers;

• payment processors, banks, accountants, auditors, insurers, and professional advisers;

• government agencies, regulators, courts, law-enforcement authorities, or emergency services where required or permitted by law; and

• any other party to whom you have authorised disclosure.

 

We do not sell or rent personal data.

 

Where third-party service providers process personal data on our behalf, we take reasonable steps to ensure that they use the information only for the relevant service and provide appropriate protection.

​

9. Wix and Third-Party Platforms

Our website is created or hosted using Wix and may use Wix forms, bookings, analytics, cookies, or related website functions.

​

Information submitted through the website may be processed or stored through Wix or other third-party service providers used by the Practice.

​

Third-party platforms operate under their own privacy policies and security practices. We encourage you to review the privacy policies of any third-party platform you use when interacting with us.

​

Our website may also contain links to external websites or social-media platforms. We are not responsible for the privacy practices or content of websites that we do not control.

​

10. Cookies and Website Analytics

Our website may use cookies and similar technologies to:

• enable essential website functions;

• remember user preferences;

• understand how visitors use the website;

• monitor website performance;

• improve content and navigation; and

• support analytics or marketing functions where enabled.

 

You may be able to manage or disable cookies through your browser settings or the website’s cookie controls. Disabling certain cookies may affect how the website functions.

​

Where required, we will request consent before using non-essential cookies.

​

11. Marketing Communications

We may send newsletters, parenting resources, updates, or promotional messages where you have consented or where otherwise permitted by law.

​

You may unsubscribe at any time by using the unsubscribe option in the communication or contacting us.

​

Consent to marketing is separate from consent to be contacted about a quiz result, therapy enquiry, consultation, or existing service.

​

We will manage telephone, SMS, and other marketing communications in accordance with applicable requirements, including Singapore’s Do Not Call provisions where relevant.

​

12. Overseas Visitors and Cross-Border Transfers

Families outside Singapore may submit enquiries or complete our quizzes.

The availability of consultations, therapy, or other services may depend on your location, the nature of the service, professional requirements, insurance arrangements, and applicable local laws.

​

Some of our technology, website, cloud-storage, communication, scheduling, or payment service providers may process or store personal data outside Singapore.

Where personal data is transferred outside Singapore, we will take reasonable steps to ensure that it receives a standard of protection comparable to that required under the PDPA.

​

13. Protection of Personal Data

We take reasonable administrative, technical, and physical measures to protect personal data against unauthorised access, collection, use, disclosure, copying, modification, loss, disposal, or similar risks.

​

These measures may include access controls, password protection, secure systems, staff confidentiality requirements, restricted access to records, and appropriate procedures for handling personal data.

​

However, no website, email system, messaging service, or method of electronic storage is completely secure. You should avoid sending highly sensitive or urgent information through unsecured communication channels.

​

14. Retention of Personal Data

We retain personal data only for as long as it is reasonably necessary to fulfil the purposes for which it was collected and to meet applicable professional, safeguarding, insurance, accounting, legal, and regulatory requirements.

​

The applicable retention period may vary depending on the type of information, the age of the client, the services provided, and any legal or professional obligations.

When personal data is no longer required for a legal or business purpose, we will take reasonable steps to delete, destroy, anonymise, or otherwise securely dispose of it.

​

15. Accuracy of Personal Data

We take reasonable steps to ensure that personal data in our possession is accurate and complete where it is likely to be used to make a decision affecting you or your child or disclosed to another organisation.

​

Please inform us if your information changes or if you believe that any personal data held by us is inaccurate or incomplete.

​

16. Access and Correction Requests

You may request:

• access to personal data about you that is in our possession or control;

• information about how that data has been used or disclosed within the applicable period; or

• correction of inaccurate or incomplete personal data.

Requests should be submitted in writing to our Data Protection Contact using the details below.

​

We may need to verify your identity and authority before processing the request. Where the request concerns a child or teenager, we may also need to verify your parental responsibility, guardianship, or authority.

​

Access may be restricted where an exception under applicable law applies, including where disclosure could reveal another person’s personal data or cause harm.

Where permitted, we may charge a reasonable fee for processing an access request. We will inform you of any applicable fee before proceeding.

​

17. Data Breaches

If we become aware of a personal-data breach, we will assess the incident and take reasonable steps to contain and address it.

​

Where notification is required under the PDPA, we will notify the Personal Data Protection Commission and affected individuals as applicable.

​

18. Safeguarding, Risk, and Legal Disclosures

Therapy and consultation information is treated as private and confidential. However, confidentiality may be limited where disclosure is reasonably necessary or legally required, including where:

• there is concern that a child, teenager, or another person may be at risk of serious harm;

• there is suspected abuse, neglect, exploitation, or safeguarding risk;

• disclosure is required by law, court order, or regulatory authority;

• emergency assistance is required; or

• disclosure is otherwise permitted under applicable law or professional obligations.

 

Where reasonably possible and appropriate, we will discuss such disclosure with the parent, guardian, or client before it occurs.

​

19. Emergency Information

Our website, quizzes, enquiry forms, email, and routine messaging channels are not monitored as emergency or crisis services.

​

If a child or teenager is at immediate risk of harming themselves or another person, please contact emergency services or attend the nearest hospital emergency department. Do not wait for a response from the Practice.

​

20. Changes to This Privacy Policy

We may update this Privacy Policy periodically to reflect changes in our services, technology, professional requirements, or applicable law.

​

The latest version will be published on our website with the updated effective date. Continued use of the website or our services after an update will be subject to the revised policy.

​

21. Contact and Data-Protection Enquiries

For questions, requests, complaints, withdrawal of consent, or concerns regarding personal data, please contact:

Data Protection Contact
The Flow & Flourish Practice
Email: fecha@flowandflourish.sg

​

Please include sufficient details for us to understand and respond to your request.

We aim to acknowledge and address privacy enquiries within a reasonable period.