Privacy policy
1. Who We Are
2. Data Collected
|
Type of Data |
Examples |
Purpose / Lawful Basis |
|
Identity data |
name, title, professional role |
To register accounts and issue CPD certificates — contract |
|
Contact data |
email address, phone number |
To communicate with you about your courses or enquiries — contract / legitimate interest |
|
Financial data |
payment card details (via Stripe) |
To process payments securely — contract |
|
Technical data |
IP address, browser type, device info |
To secure and improve our Site — legitimate interest |
|
Marketing data |
email preferences, newsletter opt-ins |
To send updates and offers if you consent — consent |
|
Usage data |
course progress, log-in activity |
To deliver and improve learning experience — contract / legitimate interest |
We do not collect special-category (sensitive) personal data unless you provide it voluntarily and consent explicitly.
3. Our Use of Data
- Provide access to online courses and materials.
- Manage your account and verify identity.
- Process payments and issue receipts.
- Send service updates or marketing emails (only if you’ve opted in).
- Improve our Site, courses, and customer experience.
- Comply with legal and financial obligations.
We will not sell or rent your data to third parties.
4. Legal Bases for Processing
We rely on one or more of the following legal bases under UK GDPR:
-
Contract: when processing is necessary to deliver a course or fulfil your order.
-
Consent: for optional marketing or analytics where you have opted in.
-
Legal obligation: where processing is required by law (e.g. tax records).
-
Legitimate interest: to operate and improve our Site, prevent fraud, or manage business operations.
5. Data Sharing and Third-Party Processors
We only share data with trusted service providers necessary to run our business:
|
Provider |
Purpose |
Location / Safeguards |
|
LearnWorlds |
Platform hosting and course delivery |
EU-based, GDPR-compliant |
|
Stripe Payments UK Ltd |
Payment processing |
UK / EEA / US – SCCs in place |
|
MailerLite or equivalent |
Email marketing (if used) |
EU-based, GDPR-compliant |
|
Google Analytics (optional) |
Site analytics |
US – SCCs in place |
|
Microsoft / Cloudflare / hosting provider |
Website hosting and security |
UK / EEA – GDPR-compliant |
Each processor is bound by a data-processing agreement and acts only on our instructions.
6. International Transfers
If data is transferred outside the UK / EEA (for example, to the US), we ensure appropriate safeguards, such as the UK Addendum to the EU Standard Contractual Clauses or other lawful mechanisms.
7. Data Retention
We retain personal data only as long as necessary for the purposes collected:
-
Account, course and CPD records: 6 years after last activity
-
Financial transactions: 6 years (for legal accounting reasons)
-
Marketing preferences: until you withdraw consent
After these periods, data will be securely deleted or anonymised.
8. Your Rights
Under the UK GDPR you have the right to:
-
Access your personal data (free of charge)
-
Rectify inaccurate data
-
Erase data (“right to be forgotten”)
-
Restrict processing or object to it
-
Withdraw consent at any time
-
Portability – receive data in a structured format
-
Complain to the Information Commissioner’s Office (ICO): www.ico.org.uk
To exercise these rights, contact admin@confidenttherapist.org.
9. Cookies and Analytics
Our Site uses essential cookies to operate and optional cookies (e.g. analytics or functional tools) only with your consent.
For details, see our separate Cookie Policy which lists specific cookies, their providers, and purposes.
You can manage your cookie preferences at any time through the on-screen consent banner or your browser settings.
10. Data Security
We implement technical and organisational measures to protect your data, including encryption, secure hosting, password protection, and restricted access to authorised personnel only.
11. Think Space App
All content you enter into the app — including session reflections, client identifiers, theme tags, and voice notes — is stored exclusively on your own device using your browser's local storage. Nothing is sent to J Bild Health & Education, Confident Therapist Hub™, or any third party.
| Type of Data | Where it is stored | Transmitted to us? |
|---|---|---|
| Session reflections | Your device only | No |
| Client identifiers (initials/pseudonyms) | Your device only | No |
| Theme tags and supervision notes | Your device only | No |
| Voice notes (if recorded) | Your device only (temporary, in-memory) | No |
| App settings and PIN | Your device only | No |
We have no access to any content you create within the app.
Client confidentiality
- Keeping your device secure and, where appropriate, enabling the app's optional PIN protection
- Taking regular backups using the app's built-in export feature
- Deleting your data from the device if you cease to use the app
12. Changes to This Policy
12. Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in law or practice. The latest version will always be published on this page.
If material changes occur, we will notify registered users by email.
13. Contact
admin@confidenttherapist.org
J Bild Health & Education, Tonbridge, Kent, United Kingdom


