​

Privacy policy

Trust CBT is a provider of CBT.  This privacy notice provides information about the personal information we process about you as a data controller, in compliance with the General Data Protection Regulation (GDPR). We take the security of data very seriously and understand the importance of keeping it safe.

Our ICO registration number - 00019249123

Please contact our Data Protection Officer Lindsay Nathan lindsay.nathan@trustcbt.co.uk with any questions or requests about the personal information we process.

This website collects data submitted by users filling in the contact form or by emailing lindsay.nathan@trustcbt.co.uk

By completing the contact form or emailing us, you are authorising Trust CBT to use the details provided to reply to questions and requests for information. Your information will only be used for the purposes of communicating with you and will not be shared outside this company or used for any marketing purposes.

If you engage in therapy the personal data we hold may include:

• Names, contact details and dates of birth;

• Health information;

• Information about race, ethnic origin and sex. 

The personal data is provided by the person engaging in therapy. Occasionally we are provided with data from relatives carers of the individual or other health providers. 

Written notes are kept each session and stored securely. 

We process the data because it is in our legitimate interests as a CBT service to do so. 

In relation to any special category personal data, such as health records or information concerning, race, ethnic origin, or sex is, we rely on the legal claims basis for processing this data, in addition to our legitimate interest.

In many cases, an individual has consented to the transfer of their personal data to us. Where an individual has consented, he or she may easily withdraw it by notifying Lindsay Nathan on the details below.

​

Your Rights

• Right to be informed about what we do with your personal data;

• Right to have a copy of all the personal information we process about you;

• Right to rectification of any inaccurate data we process, and to add to the information we hold about you if it is incomplete;

• Right to be forgotten and your personal data destroyed;

• Right to restrict the processing of your personal data;

• Right to object to the processing we carry out based on our legitimate interest;

 

Other personal data

We also process personal data pursuant to our legitimate interests in running our business such as:

• Invoices and receipts

• Accounts and tax returns

We do not employ staff.

​

Retention period

Personal data is retained, where necessary, for six years or for invoice payment purposes. 

Administrative data is retained for up to six years, in the unlikely event there are queries from HMRC. Where it is not necessary to retain the data for six years, it is destroyed as soon as possible.

​

Whom do we share personal data with?

We do not share personal data with anyone external to the organisation, other than with:​

• HMRC

• ​Pursuant of a court order

• GP or other health professional involved in your care

 

Information Commissioner's Office

If you have any concerns about the way your personal information has been processed, please contact Lindsay Nathan on 07816936902

Alternatively, you may contact the Information Commissioner’s Office on 0303 123 1113.

​

Review

This information will be reviewed annually. Next due 3/3/25