Privacy Statement


Information you give us

When you access Solihull CBT, you are permitting us to store personal information you give us - such as your name, email address, postal address, telephone number and credit/debit card and bank details. 


Sensitive personal data

Data Protection law recognises that certain categories of personal information are more sensitive such as health information, race, religious beliefs and political opinions.

We do not collect such data when you access Solihull CBT


Clinical notes

Solihull CBT do not store clinical notes on you. The therapist will keep hand written notes as an aid memoire whilst you are seeing them. These will not contain any identifying information. These process notes will be shredded upon discharge or you can request to keep them for yourself.

For this reason if you were to request your notes after discharge there would be no notes available. If you needed a report following discharge you would need to book a one off session for a clinical review, as well as any charge for report writing.


Legal basis

There are three bases under which we may process your data:

Contract purposes

When you access Solihull CBT, you are entering into a contract with us. In order to fulfil this contract we need to process and store your data. (For example, we may need to contact you by post, email or telephone to make you aware of your membership renewal for example or simply to administer your membership).

Legitimate business interests

In certain situations, we collect and process your personal data for purposes that are in our legitimate organisational interests. However, we only do this if there is no overriding prejudice to you by using your personal information in this way.

With your explicit consent

For any situations where the two bases above are not appropriate, we will instead ask for your explicit consent before using your personal information in that specific situation.

Marketing communications

We do not use your personal information for marketing purposes


Other processing activities

In order to improve our website, we may analyse information about how you use it and the content and ads that you interact with.

You have the right to object to any of this processing at any time.

If you wish to do this, please use the contact details at the end of this policy.

Please bear in mind that if you object this may affect our ability to carry out tasks above that are for your benefit.

Third parties

There are certain circumstances under which we may disclose your personal information to third parties. These are as follows:

  • Where we are under a duty to disclose your personal information in order to protect your safety or the safety of others and to comply with any legal obligation (for example to government bodies and law enforcement agencies).


Cookies are small text files that are automatically placed onto your device by some websites that you visit. They are widely used to allow a website to function, as well as provide website operators with information on how the site is being used.

We use cookies to identify how the website is being used and what improvements we can make. By adjusting the settings of your browser, you can choose to accept or refuse cookies from the websites that you visit.

You can also decide to be informed when a cookie is about to be placed on your computer. Please consult your browser’s website for details on how to disable cookies. If you choose to block all cookies, this will have a negative impact upon the usability of many websites, including Solihull CBT online services.

Your debit and credit card information

If you use your credit or debit card to pay for Solihull CBT services, we will ensure that this is carried out securely and in accordance with the Payment Card Industry Data Security Standard (PCI-DSS). You can find more information about this at

Maintaining your personal information

If there are aspects of your record that are inaccurate or that you would like to remove, you can do this by contacting us.

Any objections you make to the processing of your data will be stored against your record on our system so that we can comply with your requests.

Security of your personal information

We will put in place appropriate safeguards (both in terms of our procedures and the technology we use) to keep your personal information as secure as possible.

We will ensure that any third parties we use for processing your personal information do the same.

Your rights to your personal information

You have a right to request a copy of the personal information that we hold about you and to have any inaccuracies in this data corrected. Please use the contact details at the end of this policy if you would like to exercise this right.

Contact details and further information

Please get in touch with us if you have any questions about any aspect of this privacy policy, and in particular, if you would like to object to any processing of your personal information that we carry out for our legitimate organisational interests.

For more information on GDPR, visit