Signed in as:

filler@godaddy.com

Account

Specialist CBT & EMDR Therapy In Wirral and Online

GetCBT Privacy Policy

Privacy Policy

Last updated: September 2026

GetCBT is committed to protecting your privacy and handling your personal information securely, lawfully and transparently.

This privacy policy explains how GetCBT collects, uses and protects personal information when you visit this website, contact us, enquire about or receive therapy or professional services, or purchase digital resources.

Who is responsible for your information?

The data controller is:

GetCBT / Victoria Lacey
Thursby House
1 Thursby Road
Bromborough
Wirral
CH62 3PW

Email: support@getcbt.co.uk
Telephone: 0151 453 3877

GetCBT is registered with the Information Commissioner's Office (ICO).

Information we may collect

The information we collect depends on how you interact with GetCBT.

Website visitors and enquiries

If you contact GetCBT through the website, email, telephone or a booking/enquiry system, we may collect information including:

your name;
email address and telephone number;
information you choose to include in your enquiry;
appointment or consultation information; and
technical information generated when you use the website, such as device, browser and cookie information.

Please be aware that information you voluntarily provide about your mental or physical health may constitute special category data and receives additional protection under data protection law.

Therapy clients

If you proceed with therapy, additional information may be collected where necessary to provide safe and appropriate clinical care. This may include:

contact and identifying information;
referral and appointment information;
relevant mental and physical health information;
assessment and clinical information;
therapy goals, treatment plans and clinical notes;
risk and safeguarding information;
relevant medication or treatment history;
correspondence relating to your care; and
payment, invoice or insurance information where applicable.

Clients are provided with further information about confidentiality, clinical records and information sharing as part of the therapy process.

Health information is classed as special category personal data and is afforded additional protection under UK data protection law.

Purchases and digital resources

If you purchase a GetCBT digital resource, we may process information necessary to administer the transaction and provide the product, including:

your name;
email address;
billing and transaction information;
the product and licence purchased; and
information required to provide access to or deliver your digital purchase.

Payments are processed using third-party payment providers, such as Stripe. GetCBT does not receive or store your full payment-card details.

Payment and digital-delivery providers process certain information in accordance with their own privacy policies.

Purchase information may also be retained where necessary for accounting, taxation, licensing, fraud prevention, customer support and the establishment or defence of legal claims.

Why we use your information

Depending on your relationship with GetCBT, personal information may be used to:

respond to enquiries;
arrange consultations and appointments;
assess suitability for services;
provide and manage psychological therapy;
maintain appropriate clinical records;
manage risk and safeguarding responsibilities;
communicate with you about your care or enquiry;
process payments and maintain financial records;
fulfil purchases and deliver digital products;
administer and enforce digital-resource licences;
respond to customer-service requests;
meet professional, regulatory, legal, insurance and accounting requirements;
maintain the security and operation of the website and services; and
establish, exercise or defend legal claims where necessary.

Our lawful bases

GetCBT only processes personal information where there is an appropriate lawful basis.

Depending on the circumstances, these may include:

Contract – where processing is necessary to provide a service or digital product you have requested or to take steps at your request before entering into a contract.

Legal obligation – where information must be processed to comply with a legal requirement.

Legitimate interests – where processing is reasonably necessary for the operation, administration or protection of GetCBT and those interests are not overridden by your rights and interests.

Consent – where consent is the appropriate lawful basis. Where processing relies on consent, you may withdraw that consent at any time.

Where GetCBT processes health information or other special category data in connection with the provision of psychological therapy, an appropriate condition under Article 9 of the UK GDPR is also identified. This may include processing necessary for the provision of health care or treatment by a health professional subject to professional confidentiality requirements.

Confidentiality and sharing information

GetCBT does not sell your personal information.

Information is only shared where there is an appropriate reason and lawful basis for doing so.

Depending on the circumstances, information may be processed by or shared with organisations or professionals such as:

secure website, email, booking and IT service providers;
payment and accounting providers;
insurers or funding organisations where relevant;
clinical supervisors, with identifying information minimised wherever appropriate;
healthcare or other professionals involved in your care where appropriate;
safeguarding, emergency or statutory services where disclosure is necessary;
professional, regulatory, legal or insurance advisers where required; and
authorities where disclosure is required by law.

Further information about clinical confidentiality and the circumstances in which information may need to be shared is provided to therapy clients.

Website, cookies and third-party services

The GetCBT website may use cookies and similar technologies required for the website to function and, where applicable, for analytics, embedded content or other website features.

Some pages may use services provided by third parties, such as Google Maps. These providers may process technical information about your device or use cookies in accordance with their own privacy policies.

Where consent is required for non-essential cookies, these should not be activated unless you provide that consent through the website's cookie controls.

International processing

Some technology, website, payment or other service providers may process information outside the UK.

Where personal information is transferred internationally, GetCBT takes appropriate steps to ensure that the transfer is made in accordance with applicable data protection requirements and that appropriate safeguards are used where required.

How long we keep information

Personal information is retained only for as long as reasonably necessary for the purpose for which it was collected and to meet applicable clinical, professional, regulatory, insurance, taxation and legal requirements.

Different types of information may therefore have different retention periods.

Clinical records are retained in accordance with applicable professional, legal and insurance requirements.

Enquiry information that does not lead to therapy is retained only for as long as reasonably necessary to manage the enquiry and any appropriate follow-up.

Purchase and transaction records may be retained for the periods required for accounting, taxation, licensing, customer-service and legal purposes.

When information is no longer required, it will be securely deleted or destroyed where appropriate.

Keeping your information secure

GetCBT takes appropriate technical and organisational measures to protect personal information against unauthorised access, loss, misuse, alteration or disclosure.

Access to personal information is limited to those who require it for an appropriate professional or business purpose.

No method of electronic transmission or storage can be guaranteed to be completely secure, but reasonable measures are taken to protect the information entrusted to GetCBT.

Your data protection rights

Depending on the circumstances and the lawful basis being relied upon, you may have rights including the right to:

be informed about how your personal information is used;
request access to personal information held about you;
ask for inaccurate information to be corrected;
request deletion of your information in certain circumstances;
request restriction of processing in certain circumstances;
object to certain types of processing;
request transfer of information in certain circumstances; and
withdraw consent where processing is based on consent.

These rights are not absolute and some exemptions may apply, particularly where information must be retained for legal, professional or clinical reasons.

To exercise your rights or ask a question about how your information is handled, contact:

support@getcbt.co.uk

Complaints

If you have concerns about how GetCBT handles your personal information, please contact GetCBT in the first instance so that the concern can be addressed.

You also have the right to complain to the UK supervisory authority:

Information Commissioner's Office (ICO)
Website: ico.org.uk

Changes to this policy

This privacy policy may be updated from time to time to reflect changes to GetCBT's services, technology, legal requirements or data-processing arrangements.

The current version will be published on this website with the date it was last updated.