1. Regulatory Compliance
TranqBay is a technology platform that connects individuals with independent, licensed mental-health professionals, and is not itself a healthcare provider. We operate under regulatory frameworks across multiple jurisdictions, ensuring compliance with the laws governing our platform, the independent practitioners who use it, data protection, and business operations.
1.1 Corporate Structure and Registration
United States Operations
- •Registered as: TranqBay LLC
- •Jurisdiction: Delaware Limited Liability Company
- •Compliance: State-specific healthcare regulations
- •Licensing: Maintained per state requirements
United Kingdom Operations
- •Registered as: TranqBay Ltd
- •Registration Number: CRN 16294223
- •Jurisdiction: Company registered in England and Wales
- •Compliance: UK healthcare regulations (including CQC requirements)
- •Licensing: Maintained per UK regulatory framework
Nigerian Operations
- •Registered as: TranqBay Health Limited
- •Framework: Companies and Allied Matters Act 2020
- •Regulatory Body: Corporate Affairs Commission
- •Healthcare Compliance: MDCN requirements
Canadian Operations
- •Compliance: Federal and provincial healthcare regulations
- •Privacy: PIPEDA and provincial privacy laws
- •Healthcare: Provincial health information acts
- •Professional: Provincial regulatory college requirements
Australian Operations
- •Compliance: Federal and state healthcare regulations
- •Privacy: Privacy Act 1988 and Australian Privacy Principles
- •Healthcare: AHPRA and professional body requirements
- •Telehealth: Australian telehealth guidelines compliance
1.2 Data Protection Framework
We comply with the data-protection laws of every jurisdiction in which we operate, including the EU and UK GDPR, US HIPAA, Canada's PIPEDA, Australia's Privacy Act 1988, and Nigeria's NDPA 2023. To avoid duplicating the detail, how we collect, use, share, retain, and protect personal data, our lawful bases, data-subject rights, international-transfer safeguards, and breach-notification commitments are set out in full in our Privacy Policy.
- •See the TranqBay Privacy Policy at tranqbay.health/privacy-policy for our complete data-protection disclosures.
1.3 Healthcare Service Regulations
United States
- •State telemedicine laws
- •Medical board requirements
- •Interstate practice regulations
- •Professional licensing standards
Nigeria
- •MDCN guidelines
- •Health regulatory authority requirements
- •Professional practice standards
- •Telemedicine regulations
Canada
- •Provincial regulatory college requirements
- •Inter-provincial practice regulations
- •Provincial health information acts
- •Telehealth service standards
Australia
- •AHPRA registration requirements
- •State and territory regulations
- •Medicare telehealth guidelines
- •Professional body standards
2. Professional Standards
2.1 Therapist Verification
TranqBay verifies the identity and professional registration of practitioners at onboarding. Verification does not guarantee the accuracy of credentials, and practitioners remain independent professionals responsible for their own practice and conduct, as set out in our Terms of Service. Our process includes:
- •Verification of professional registration and licence at onboarding against the relevant regulatory body
- •Identity verification
- •Confirmation of specialty certifications where applicable
- •Review of professional references where applicable
Ongoing checks
- •Periodic re-checks of licence status and professional registration
- •Action on notified disciplinary findings
- •Quality assurance reviews
2.2 Practice Standards
Clinical Guidelines
- •Evidence-based practice standards
- •Cultural competency requirements
- •Ethical practice guidelines
- •Quality of care metrics
- •Patient safety protocols
3. Operational Compliance
3.1 Security Framework
We protect data with encryption in transit and at rest, role-based access controls, monitoring, and incident-response procedures. The full technical and organisational measures are described in the Data Security section of our Privacy Policy.
- •Access control systems
- •Data backup procedures
- •Disaster recovery plans
- •Employee training programs
- •Security awareness initiatives
3.2 Data Breach Response
We notify regulators and affected individuals within the timeframes required by each applicable law (for example, within 72 hours to the ICO under the UK GDPR and to the NDPC under the Nigeria Data Protection Act, and as soon as feasible to the Privacy Commissioner of Canada). Our full, jurisdiction-by-jurisdiction breach-notification commitments are in the Data Breach Notification section of our Privacy Policy. Our internal incident response includes:
- •Immediate breach containment and assessment
- •Risk evaluation for affected individuals
- •Notification to relevant authorities within required timeframes
- •Direct notification to affected users with breach details
- •Implementation of remediation measures
- •Post-incident review and security improvements
3.3 Financial Compliance
Payment Processing
- •International payment standards
- •Regional banking regulations
- •Anti-money laundering protocols
- •KYC requirements
- •Transaction monitoring
4. Quality Assurance
4.1 Service Quality Monitoring
Performance Metrics
- •Patient satisfaction scores
- •Therapist ratings
- •Response time tracking
- •Service reliability metrics
Quality Control
- •Regular service audits
- •Performance reviews
- •Improvement protocols
- •User feedback analysis
- •Incident investigation procedures
5. Contact Information
5.1 Compliance Contact
For all compliance, privacy, and policy inquiries:
Contact Information
Email:[email protected]
Response:Response Time: Within 1-2 business days
For additional information or clarification about our legal policies, please contact our legal team.