0114 383 0004
4 Norfolk Park Road Sheffield s2 3QE

Privacy Policy

This Privacy Policy outlines how Sheffield CBT Practice collects, uses, and protects the personal data of its users. By using our services, you agree to the terms set out in this policy.

Owner and Data Controller

Sarah Finneran
Sheffield CBT Practice
4 Norfolk Park Road
Sheffield, S2 3QE
United Kingdom
Telephone: 0114 383 0004
Email: info@sheffieldcbt.co.uk

Types of Data Collected

We collect the following types of personal data:

  • Personal Identification Data: Name, contact details, and any other information provided during the assessment or therapy process.
  • Assessment Materials: Notes, reports, and other documentation created during therapy or assessments.
  • Usage Data: Automatically collected data such as, browser type, and activity on the website (if applicable).
  • Cookies: Small data files used to enhance user experience on our website. Please refer to our Cookie Policy for further details.

Details on the types of personal data collected will be provided in specific sections of this Privacy Policy.

How Data is Collected

Data is either:

  • Freely provided by the user: This includes information you provide when you contact us, book appointments, or participate in assessments.
  • Automatically collected: This includes usage data and cookies when you interact with our website or services online.

Mandatory vs. Optional Data

Some data requested by Sheffield CBT Practice is mandatory. Failure to provide mandatory data may prevent us from providing our services. Optional data, if not provided, will not affect the functioning of the service.

Mode and Place of Data Processing

Methods of Processing
We take appropriate security measures to prevent unauthorized access, disclosure, modification, or unauthorized destruction of your data. Data processing is carried out using computers and IT-enabled tools, following organizational procedures and modes strictly related to the purposes outlined in this policy.

Location of Processing
The data is processed at Sheffield CBT Practice’s offices and possibly through third-party services or partners who assist in the processing of data. If your data is transferred outside the European Economic Area (EEA), we will ensure appropriate safeguards are in place.

Third-Party Data Processors
We may employ third-party service providers to process your personal data on our behalf. These third parties will be obligated to maintain the confidentiality of your data and only process it in accordance with our instructions.

Legal Basis for Data Processing

We process your personal data under the following conditions:

  • Consent: When you have given us consent to process your data for specific purposes (e.g., during assessments or treatment).
  • Contractual necessity: For the provision of our services (e.g., delivering therapy, conducting assessments).
  • Legal obligation: To comply with relevant laws, regulations, or professional standards.
  • Legitimate interest: When processing is necessary for the legitimate interests pursued by the practice or a third party, provided those interests are not overridden by your rights.

Data Retention

  • Assessment Materials: All assessment materials will be destroyed after two years unless specifically requested by you in writing for ongoing support. If materials are required for ongoing assessment, they will be retained.
  • Assessment Records: We retain assessment records securely in electronic and handwritten form for a period of five years to allow clients to access them at a future date. After this period, records will be securely deleted.

Users’ Rights

You have the following rights regarding your personal data:

  • Right to Access: You can request information about the personal data we process about you.
  • Right to Rectification: You may request that we correct any inaccuracies in your data.
  • Right to Erasure: You may request that we delete your data, provided there are no overriding legal obligations to retain it.
  • Right to Restrict Processing: You can request the restriction of your data processing in certain situations.
  • Right to Data Portability: You may request a copy of your personal data in a commonly used, machine-readable format and, if technically feasible, to have it transferred to another data controller.
  • Right to Withdraw Consent: If we process your data based on your consent, you may withdraw that consent at any time.
  • Right to Object: You may object to the processing of your data, particularly if we rely on legitimate interests as the basis for processing.

If you wish to exercise any of these rights, please contact us at info@sheffieldcbt.co.uk.

Cookie Policy

Sheffield CBT Practice uses cookies on our website to improve your experience. For more detailed information on how we use cookies, please refer to our Cookie Policy.

Legal Actions

We may be required to disclose personal data in response to a legal request, such as from a court order or to comply with other legal obligations.

Changes to This Privacy Policy

We reserve the right to update this privacy policy at any time. Any changes will be communicated through our website or by email. We recommend checking this page regularly for any updates.

Definitions

  • Personal Data: Any information that can directly or indirectly identify you.
  • Usage Data: Information collected automatically through our website, such as your IP address, browser type, and usage patterns.
  • Data Controller: The entity responsible for determining how and why your personal data is processed.
  • Data Processor: An entity that processes data on behalf of the Data Controller.

Contact Us

For any questions regarding this Privacy Policy or to exercise your data protection rights, please contact us at:

Sarah Finneran
Sheffield CBT Practice
4 Norfolk Park Road
Sheffield, S2 3QE
Telephone: 0114 383 0004
Email: info@sheffieldcbt.co.uk