This Privacy Policy explains how J Bild Health & Education (“we”, “us”, “our”) collects, uses, and protects personal information when you use our website www.confidenttherapist.org - (“the Site”) and related services.
We are committed to protecting your privacy and complying with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
1. Who We Are
Data Controller:
J Bild Health & Education
Tonbridge, Kent, United Kingdom
Email: admin@confidenttherapist.org
We determine how and why your personal data is processed in connection with our services.
2. Data Collected
We may collect and process the following categories of personal data:
Type of Data
Examples
Purpose / Lawful Basis
Identity data
name, title, professional role
To register accounts and issue CPD certificates — contract
Contact data
email address, phone number
To communicate with you about your courses or enquiries — contract
/ legitimate interest
Financial data
payment card details (via Stripe)
To process payments securely — contract
Technical data
IP address, browser type, device info
To secure and improve our Site — legitimate interest
Marketing data
email preferences, newsletter opt-ins
To send updates and offers if you consent — consent
Usage data
course progress, log-in activity
To deliver and improve learning experience — contract
/ legitimate interest
We do not ask you to provide special-category personal data unless this is necessary for a specific service. If you choose to provide special-category data, we will process it only where there is a lawful basis and, where required, an additional condition under data protection law.
3. Our Use of Data
We use personal data to:
Provide access to online courses and materials.
Manage your account and verify identity.
Process payments and issue receipts.
Direct marketing: consent where required, or another lawful basis where permitted by applicable electronic-marketing rules.
Improve our Site, courses, and customer experience.
Comply with legal and financial obligations.
We will not sell or rent your data to third parties.
4. Legal Bases for Processing
We rely on one or more of the following legal bases under UK GDPR:
Contract: when processing is necessary to deliver a course or fulfil your order.
Consent: for optional marketing or analytics where you have opted in.
Legal obligation: where processing is required by law (e.g. tax records).
Legitimate interest: to operate and improve our Site, prevent fraud, or manage business operations.
5. Data Sharing and Third-Party Processors
Where a provider acts as our processor, we have appropriate contractual arrangements in place. Some providers may also use their own subprocessors.
LearnWorlds
Purpose: Course hosting and delivery, learner accounts, course access, course progress and completion records.
Personal data: Name, email address, account details, course enrolment, course progress, completion information and other information needed to provide the course.
Role: LearnWorlds processes personal data on our behalf and may use approved subprocessors.
International transfers: LearnWorlds may use subprocessors in other countries. Where personal data is transferred outside the UK, appropriate safeguards are used where required.
Stripe
Purpose: Payment processing, refunds and payment administration.
Personal data: Name, email address, billing information, transaction details and payment information required to process a payment.
Role: Stripe may act as a data processor and/or as an independent data controller, depending on the processing involved. We do not store full payment-card details ourselves.
International transfers: Stripe may process personal data in other countries. Where required, appropriate safeguards are used for international transfers.
MailerLite
Purpose: Newsletter and marketing emails.
Personal data: Name, email address, subscription status and email preferences.
Role: MailerLite processes subscriber information on our behalf and may use subprocessors.
International transfers: MailerLite may process personal data internationally. Appropriate safeguards are used where required.
Google Analytics
Purpose: Website analytics and measurement.
Personal data: Information about website use, device and browser information, IP address and other analytics information collected in accordance with your cookie choices.
Role: Google may process analytics information on our behalf and may also process some information for its own purposes.
International transfers: Google may process information internationally. Appropriate safeguards are used where required.
Cloudflare
Purpose: Website security, traffic management and performance.
Personal data: IP address, technical information and network or security information.
Role: Cloudflare may process information on our behalf and may also process some information for its own purposes.
International transfers: Cloudflare may process or access information internationally. Appropriate safeguards are used where required.
Microsoft or other service providers
Purpose: Website, email, storage or other business services.
Personal data: Information needed to provide the particular service.
Role: This depends on the service being used. Where the provider acts as our processor, appropriate contractual arrangements apply.
International transfers: Where personal data is transferred outside the UK, we use a lawful transfer mechanism where required.We use service providers to process personal data on our behalf.
Where a provider acts as our data processor, we have the required contractual arrangements and data processing agreements in place. Some providers may also process personal data as independent controllers for their own legal or regulatory purposes.
6. International Transfers
If data is transferred outside the UK / EEA (for example, to the US), we ensure appropriate safeguards, such as the UK Addendum to the EU Standard Contractual Clauses or other lawful mechanisms.
7. Data Retention
We retain personal data only as long as necessary for the purposes collected:
Account, course and CPD records: 6 years after last activity
Financial transactions: 6 years (for legal accounting reasons)
Marketing preferences: until you withdraw consent
After these periods, data will be securely deleted or anonymised.
8. Your Rights
8a. Under the UK GDPR you have the right to:
Access your personal data (free of charge)
Rectify inaccurate data
Erase: request erasure of your personal data, where the legal conditions for erasure are met.
Restrict processing or object to it
Withdraw consent at any time
Portability – receive data in a structured format
Complain
to us if you believe we have not handled your personal data in line with data protection law (see "Data protection complaints" below)
to the Information Commissioner's Office (ICO) at www.ico.org.uk — you can do this at any time, though we'd encourage you to raise it with us first.
You have the right to complain to us if you think we have not complied with data protection law in handling your personal data. You can complain by emailingadmin@confidenttherapist.org. We will:
acknowledge your complaint within one calendar month of receiving it
take appropriate steps to look into it without undue delay
keep you informed about progress and the outcome.
Making a complaint to us does not affect your right to complain to the ICO at any time.
9. Cookies and Analytics
Our Site uses essential cookies to operate and optional cookies (e.g. analytics or functional tools) only with your consent.
For details, see our separate Cookie Policy which lists specific cookies, their providers, and purposes.
You can manage your cookie preferences at any time through the on-screen consent banner or your browser settings.
10. Data Security
We implement technical and organisational measures to protect your data, including encryption, secure hosting, password protection, and restricted access to authorised personnel only.
11. Think Space App
This section relates specifically to the Think Space for Therapists app, available via Google Play and as a Progressive Web App (PWA).
What Think Space is
Think Space is a reflective journalling tool for qualified therapists and counsellors. It supports post-session reflection, supervision preparation, and personal pattern awareness. It is not a clinical tool and does not provide therapy, clinical advice, or supervision.
Data collected by Think Space
Think Space does not collect, transmit, or store any personal data on our servers.
All content you enter into the app — including session reflections, client identifiers, theme tags, and voice notes — is stored exclusively on your own device using your browser's local storage. Nothing is sent to J Bild Health & Education, Confident Therapist Hub™, or any third party.
Type of Data
Where it is stored
Transmitted to us?
Session reflections
Your device only
No
Client identifiers (initials/pseudonyms)
Your device only
No
Theme tags and supervision notes
Your device only
No
Voice notes (if recorded)
Your device only (temporary, in-memory)
No
App settings and PIN
Your device only
No
We have no access to any content you create within the app.
Client confidentiality
Think Space is designed for use by practitioners only. The app includes built-in reminders to avoid recording any information that could identify clients. Think Space is designed so that content entered into the app remains on the user's device and is not transmitted to us. You are responsible for deciding what information you enter and for securing the device on which it is stored. You should also ensure that your use of the app complies with your professional confidentiality and record-keeping obligations.
Data you are responsible for
Because all data is stored locally on your device, you are responsible for:
Keeping your device secure and, where appropriate, enabling the app's optional PIN protection
Taking regular backups using the app's built-in export feature
Deleting your data from the device if you cease to use the app
Analytics and tracking
Think Space contains no analytics, tracking scripts, or advertising. No usage data is collected or monitored by us.
App permissions
Think Space may request access to your device microphone solely to enable the optional voice note feature. Audio is processed locally in your browser and is not transmitted or stored outside your device.
12. Changes to This Policy
12. Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in law or practice. The latest version will always be published on this page.
If material changes occur, we will notify registered users by email.
13. Contact
Questions or requests regarding this Privacy Policy: admin@confidenttherapist.org J Bild Health & Education, Tonbridge, Kent, United Kingdom
