Privacy policy
Last updated: 13 August 2026
RehabSetu is used by people at a vulnerable moment, and much of what you tell us is sensitive personal data about health and substance use. This page explains plainly what we collect, why, who can see it and how to have it removed. If anything here is unclear, ask us before you submit a form.
What we collect
- Recovery assessment answers. Substance, pattern of use, physical and mental-health context, family situation, budget and location. Your answers are held in your own browser while you complete the assessment. They are sent to our servers only when you ask for a matched shortlist or a report.
- AI chat messages. What you type is sent to our AI provider to generate a reply. Do not include names, addresses or identity numbers of other people.
- Pickup requests and centre enquiries. Name, phone number, location, the centre concerned and anything you write in the notes field. We need this to call you back.
- Centre listing and event requests. Business contact details and the documents you send us for verification.
- Usage analytics. Pages viewed, device type and approximate region, via Google Analytics 4. We do not send your assessment answers, phone number or chat content to analytics.
Why we hold it
Only to do the thing you asked for: match you to appropriate care, call you back about a pickup, pass an enquiry to the centre you selected, verify a centre that wants to be listed, and understand which pages help people so we can improve them. We do not sell your data, and we do not rank centres by payment.
Who can see it
- The RehabSetu team members who handle callbacks and verification.
- A centre you specifically enquire about or request pickup from — they receive your name, phone number and location so they can respond. They do not receive your full assessment.
- Our infrastructure and AI providers, who process data on our instructions to run the database, hosting and chat features.
- Nobody else. We do not share health information with advertisers, insurers, employers or family members without your request.
How long we keep it
Pickup requests and enquiries are kept for up to 24 months so we can follow up and resolve complaints. Assessment data linked to an account is kept until you delete it. Anonymous assessment sessions stay in your browser and are cleared when you clear site data. Analytics data is retained for 14 months.
Your choices
- You can use the guides, assessment and emergency pages without giving any personal details.
- You can ask us to send you a copy of what we hold, correct it, or delete it.
- You can withdraw consent for callbacks at any time and we will stop contacting you.
To make any of these requests, write to us through the contact details on our centres page or reply to any message we send you. We respond within 30 days.
Children and young people
Our youth content is written for young people and for the adults supporting them. If you are under 18, please involve a parent, guardian or a trusted adult before submitting a pickup request or enquiry.
Security
Data is transmitted over HTTPS and stored in access-controlled databases with row-level security. No online service can promise perfect security, so please avoid sending documents or identity numbers you do not need to share.
Changes
We will update this page when our practices change and revise the date at the top. Material changes will be announced on the site. Content review date: 2026-08-13.