Effective date: 11/02/2026
Last updated: 11/02/2026

This Privacy Notice explains how Bright Fox Health (“Bright Fox”, “we”, “us”, “our”) collects, uses, stores, shares, and protects personal information when providing Mental Wellbeing Coaching and related services for young people aged 11–25.

Bright Fox Health is a trading name of Karia Consulting FZ-LLC (United Arab Emirates).

Where a translated version of this notice is provided, the English version prevails.

We may update this Privacy Notice from time to time. Where changes are significant, we will publish updates on our website.

1) What Bright Fox Does

Bright Fox provides structured mental wellbeing and mental skills coaching. Our services are non-clinical and non-medical.

Bright Fox:

• does not provide emergency, crisis, psychiatric, or hospital services
• does not diagnose mental health conditions
• does not provide medical treatment

If urgent support is required, you should contact emergency services or appropriate healthcare providers.

2) Contact Us About Privacy

If you have questions, concerns, or requests relating to this notice or your personal data, contact:

Bright Fox Health – Privacy Contact
Email: chirag@brightfox.ae
Entity: Karia Consulting FZ-LLC
Location: Dubai, United Arab Emirates

If you are not satisfied with our response, you may escalate concerns to the relevant UAE authority.

3) Who This Notice Covers

This Privacy Notice applies to:

• young people aged 11–25 receiving coaching
• parents/guardians and family members
• schools, referrers, and partner organisations
• individuals who contact us or use our website

4) What Personal Data We Collect

We collect only the minimum necessary data to provide safe, effective coaching and meet safeguarding and legal duties.

A) Young person information (11–25)

This may include:

• Identity & contact: name, date of birth, contact details, school/education setting
• Family & emergency: parent/guardian details (for under 18), emergency contacts
• Wellbeing & coaching: presenting concerns, goals, session summaries, skills plans, progress notes
• Safeguarding: information relevant to safety, welfare, risk, or protection

B) Parent/guardian and family information

• contact details and relationship to the young person
• communication preferences
• relevant family context (where needed for coaching and safeguarding)

C) Administrative and payment information

• appointment scheduling, attendance, invoices, payment status
• billing details (processed securely via service providers)

D) Website and enquiry information

• contact details and enquiry content
• basic analytics and cookie data (see Cookies section)

5) Children, Young People, Consent and Confidentiality

Bright Fox takes additional precautions for children and young people.

A) Consent model

• Under 18: we require parent/guardian consent before coaching begins.
• 16–17: we also seek the young person’s informed agreement alongside guardian consent, unless there is a safeguarding reason not to.
• 18–25: the young person is an adult and provides their own consent.

B) Confidentiality (how it works in practice)

We aim to provide young people with a safe, private space. Information shared in sessions is treated confidentially except where:

• there is a risk of harm to the young person or someone else
• we believe abuse, neglect, exploitation, or serious safety concerns may be present
• we have a legal or regulatory duty to share information
• disclosure is necessary to protect the young person’s welfare

Where possible and safe, we will discuss any need to share information with the young person and/or parent/guardian in advance.

C) “Best interests of the young person”

Where a decision involves a conflict between preferences, safety, and disclosure, we act in line with the best interests and welfare of the child/young person, and safeguarding duties.

6) How We Use Personal Data

We use personal data to:

• deliver coaching sessions and programme support
• assess needs and plan appropriate coaching goals
• communicate with parents/guardians (where applicable), the young person, and schools (with consent)
• manage bookings, attendance, and payments
• maintain safe records and meet safeguarding responsibilities
• improve service quality, training, and operations (using anonymised/aggregated data where possible)
• comply with UAE legal requirements

We do not sell personal data.
We do not use children’s personal data for advertising or marketing.

7) Legal Basis for Processing

We process personal data where we have a lawful basis, including:

• consent (especially for under-18s)
• contractual necessity (to provide the services requested)
• legal obligations (including safeguarding and regulatory duties)
• legitimate interests (operating a safe wellbeing service, maintaining records, preventing fraud)

Where required, we will ask for explicit consent for specific uses (e.g., sharing information with a school, or using testimonials).

You can withdraw consent at any time, but we may still need to retain or share limited information where required for safeguarding or legal reasons.

8) Safeguarding and When We Share Without Consent

We may disclose information without consent if we believe it is necessary to:

• protect the young person or others from harm
• respond to suspected abuse/neglect/exploitation
• comply with UAE law, a regulator, or lawful request
• respond to serious medical or safety emergencies

Where sharing is required, we aim to share only the minimum necessary information.

9) Who We Share Data With

We may share relevant personal data with:

• schools or education partners (only with appropriate consent or safeguarding need)
• external specialists/providers where you request referral and provide consent
• IT, scheduling, communications and payment service providers who support service delivery
• insurers, professional advisers (only when necessary)
• government authorities where legally required

All service providers are expected to meet appropriate confidentiality and security requirements.

10) International Transfers

We may use reputable technology providers whose systems may store or process data outside the UAE (for example, secure cloud platforms).

When this occurs, we take reasonable steps to ensure appropriate safeguards are in place, including contractual protections and security controls.

11) How We Store and Protect Data

We store information in secure electronic systems and, where needed, limited paper records.

Security measures include:

• restricted access on a need-to-know basis
• confidentiality obligations for staff/contractors
• secure passwords and access controls
• secure record-keeping procedures
• processes for suspected data breach handling

12) Accuracy and Retention

Please inform us if your details change so we can keep records accurate.

We retain personal data only as long as necessary for:

• service delivery and safeguarding
• legal/regulatory obligations
• professional record-keeping standards

When data is no longer required, it is securely deleted or anonymised.

13) Your Rights

Subject to applicable law, you may have the right to:

• request access to your personal data
• request correction of inaccurate data
• request deletion (where legally permitted)
• withdraw consent
• object to or restrict processing in certain situations
• request portability for certain data

For under-18s, these rights may be exercised by a parent/guardian, taking into account the young person’s welfare, maturity, and confidentiality expectations.

To make a request, email: chirag@brightfox.ae
We may need to verify identity before responding.

14) Cookies (Website Use)

Our website may use cookies to:

• enable core site functionality
• understand site usage and improve performance

You can control cookies through your browser settings.
We do not knowingly track children for advertising.

15) Social Media and Messaging Platforms

If you contact us via WhatsApp, Instagram, LinkedIn, or other social platforms, your message may be stored within those platforms.

Please avoid sharing sensitive personal information via social media. Where appropriate, we will move communication to more secure channels.

16) Changes to This Notice

We may update this Privacy Notice periodically.
The most current version will be available on our website.