Privacy and Data Protection Policy
CB Counsellor Training Ltd
Your privacy is an important priority. We are committed to always being a good custodian of all personal data of any individual who engages in any form with CB Counsellor training Ltd (CBCT Ltd) whether online or via phone, mobile, text, email, letter or any other form of communication.
By using our website or any of our services, or by providing us with any personal data in any form we will assume you agree to our use of your data to enable us to provide the service you have requested, across the staffing team of CBCT Ltd.
We aim to handle personal data in a responsible, transparent manner and secure it with industry standard administrative, technical and physical safeguards.
CBCT ltd is registered with the Information Commissioner’s Office (ICO) and follows their guidelines. Our website and business internal computer systems comply with the following legislation:
2018 EU General Data Protection Regulation (GDPR)
Please note by filling in an enquiry or booking form or contacting us in any form you are allowing CBCT Ltd and its staff members access to your personal data.
In carrying out our day-to-day administration of our courses and CPD events we process and store personal information relating to you, given to you by us, whilst you are in a working relationship with us. This includes initial contact, waiting list management, interview management, course management and attendance and our mailing list management. Your details will be stored electronically.
If you choose to join our Newsletter/Advertising mailing list your details will be stored in Mailchimp and in a secure storage system. We consider Mailchimp to be a third-party data processor.
Your email address will remain within our Mailchimp database and our secure encrypted system as long as we continue to use these platforms for email marketing and the operation of our workshops and courses (if you attend either) or until you specifically request removal form the list.
The legal basis for the holding of your information is to allow us to contact you to advertise our courses and CPD events, in case of the cancellation or postponement of an event you have joined, to allow us to complete all the necessary admin associated with your working relationship with us and as part of the full record of an event or course.
When you contact us via the website contact form our website does not store your data and it will not be passed to third party data processors. The data is sent to us in an email and the content is encrypted and then decrypted by our local computers and devices.
CBCT Ltd will never pass your information to a third party, without your consent, unless it is required to do so by law. Colleagues asking for recommendations of counsellors and supervisors may be given your name but will be directed to use a search engine to find your contact details.
CBCT Ltd has a presence on both Facebook and Twitter. If you engage with CBCT Ltd via these platforms it will not collect or store any of your personal data. However, you need to be aware of how these websites use your personal data and how you can control the way they use your data by visiting their sites.
CBCT Ltd endeavours to meet the highest standards when collecting and using all data and take any complaints or concerns very seriously and encourages you to let us know if you think that our collection or use or storage is unfair, misleading or inappropriate.
If you wish to make a complaint please contact Carol Belsey, Director of Learning and Director of CBCT Ltd. You can also contact the ICO as the statutory body which overseas data protection law.
This policy is always shown on our website and will be updated regularly to ensure it continues to comply with the latest regulations and best practice.
Under GDPR each citizen has the right to access of data stored, the right to rectification of data stored (to have data stored corrected), the right to restrict processing of data, the right to data portability (accessing one’s own data), the right to object to information being used, the right to concern or complaint and the right to be forgotten.
If you would like your email address removed from our mailing list or any of your details removed from our information management systems, please contact us by email and we will do so within 30 days (normally 48 hours). Our email address is info@cbcounsellortraining.co.uk. In the case of our mailing list you can also unsubscribe by using the unsubscribe link contained in any email newsletter/advertising you receive from us.
Please advise us if you feel the data we hold for you is inaccurate and we will amend and update as soon as possible.
In the event of a data breach of security leading to the accidental or unlawful destruction, loss, alteration, unauthorised disclosure of, or access to, personal data, CBCT Ltd shall promptly assess the risk to people’s rights and freedoms and if appropriate report this breach to the ICO. More information of the breaches to be reported is on the ICO website.
We occasionally use Stripe to process payments for events and some of our courses. We consider Stripe to be a third-party data controller and all Stripe transactions are subject to their Privacy Policy.
We, as an independent controller when processing information, will employ reasonable administrative, technical and physical measures to maintain the security and confidentiality of any and all Stripe data and information, including data and information about Stripe users and Stripe. However, by agreeing to use Stripe payment functions within our website, Stripe also have access to some of your data and become controllers when processing your information. You are advised to check their Privacy Policies.
We do not have access to or retain any financial information you submit as part of the purchasing process.
Please be aware that paying for workshops, course deposits or balances using your bank account into our bank account allows our bank to see your personal data including your bank account details and our accounting system (Xero) to record your name. We therefore consider our bank and Xero to be a third-party controller of data and advise you to check their privacy policies.
This policy replaces all earlier and previous versions of this document. Any changes to this document will be notified via this page on our website and by the date at the beginning of this document.
Your continued use of our website and our services will be taken to mean you agree to the terms of this updated version of this policy and understand that whilst we do our upmost to protect your data, transmission of information over the internet is not entirely secure and is done so at your own risk.
7th Edition
March 2024