Legal

Privacy policy

Last updated 28 September 2026

Your privacy matters to us, especially because people often contact a therapist about things they have not shared with anyone else. This policy explains what personal data this website collects, why, how it is protected, and the choices you have.

This policy covers the website shabnamlee.com. What you share in therapy sessions is covered separately by the confidentiality terms you receive before starting therapy.

Who we are

This website is operated by PT Integrative Healing and Wellness (“we”, “us”), trading as Shabnam Lee Mental Health Therapy & Consulting, Green Simprug Coworking Space, Kebayoran Lama, Jakarta Selatan, Indonesia. We are the data controller for the personal data described here.

For any privacy question or request, email admin@shabnamlee.com.

What we collect and why

When you send the consultation form

We collect your first and last name, email address, WhatsApp number, how you heard about us, who the therapy is for, whether you have had therapy before, and what you choose to tell us about what brings you here.

We use this only to reply to you, arrange your free consultation, and understand whether working together is a good fit. The legal basis is your explicit consent, which you give by ticking the consent box, and taking steps at your request before a possible agreement to provide services.

What you write about your situation may include information about your health or relationships. Under Indonesia’s Personal Data Protection Law this is specific personal data, and we treat it with extra care: it is seen only by Shabnam and the person who manages her enquiries, and it is never used for marketing. Please share only what you are comfortable sharing at this stage.

When you contact us on WhatsApp or by email

We receive your phone number or email address and the messages you send, and use them to reply to you. WhatsApp is operated by Meta and its own privacy policy also applies.

When you browse the site

Our hosting provider automatically records basic technical information, such as your IP address, browser type and the pages requested, in server logs. These are used to keep the site secure and working and are kept for a short period.

Cookies and analytics

The site works without any cookies. We use Google Analytics to understand, in aggregate, which pages are useful and how people find the site. Google Analytics sets cookies (named _ga and similar), which is why we ask first.

  • Google Analytics is only loaded if you click “Accept” on the cookie banner. If you click “Decline”, it is not loaded at all.
  • We do not use advertising or remarketing cookies, and we do not send the content of the consultation form to Google.
  • Your choice is remembered in your browser’s local storage (sl-consent) so we don’t ask on every page. This is not a tracking cookie.
  • You can change your mind at any time using the link in the footer. Declining removes the Google Analytics cookies from this site.

Embedded video and maps

Videos on this site are hosted on YouTube. To protect your privacy, a video is not loaded until you click to play it, and videos use YouTube’s privacy-enhanced mode. Once you click, YouTube may set its own cookies under its privacy policy.

The map to our Jakarta office in the footer is embedded from Google Maps and loads with the page. Google may receive your IP address and set its own cookies when the map loads, under Google’s privacy policy.

Who we share your data with

We never sell your personal data. We share it only with service providers who help us run the website and practice, under their own confidentiality and security obligations:

  • GitHub (GitHub Pages): website hosting.
  • FormSubmit (formsubmit.co): delivers what you write in the consultation form to our inbox.
  • Our email provider: to receive and store enquiries sent to admin@shabnamlee.com.
  • Google: Google Analytics, only if you accept analytics cookies.
  • Meta (WhatsApp) and Zoom: if you choose to contact us on WhatsApp, or when your consultation takes place by video call.

Some of these providers may process data outside Indonesia. Where that happens, we rely on providers that apply appropriate data protection safeguards, as required by law. We may also disclose information where the law requires it, or where there is a serious and imminent risk to someone’s life or safety.

How long we keep it

  • Enquiries that don’t lead to therapy: deleted within 12 months of our last contact with you, unless you ask us to delete them sooner.
  • If you become a client: your information becomes part of your client record, which is kept in line with professional record-keeping requirements and your client agreement.
  • Google Analytics data: kept by Google for no longer than 14 months, then deleted automatically.

How we protect it

The website is served over an encrypted connection (HTTPS). The website itself stores nothing you type into the consultation form; your enquiry is sent over an encrypted connection to FormSubmit, which emails it to us. Access to enquiries is limited to the people who need to respond to them.

Your rights

Under Indonesia’s Personal Data Protection Law (Law No. 27 of 2022), you have the right to:

  • ask what personal data we hold about you and get a copy of it;
  • correct data that is inaccurate or incomplete;
  • ask us to delete your data, or to stop or restrict processing it;
  • withdraw your consent at any time, without affecting anything done before you withdrew it;
  • object to decisions made solely by automated processing (we don’t make any);
  • complain to the relevant data protection authority in Indonesia.

To use any of these rights, email admin@shabnamlee.com. We will respond as soon as we can, and within the time limits set by law.

Children

This website and our services are intended for adults. We do not knowingly collect personal data from anyone under 18 through this website.

Not an emergency service

This website and the consultation form are not monitored around the clock and are not an emergency service.

Changes to this policy

If we change how we handle personal data, we will update this page and the “last updated” date at the top.