Privacy Policy
Privacy Policy
Child Therapy Service CIC and Child Therapy Practitioners Limited ICO Registration No: ZB177471 Last reviewed: May 2026 Next review due: May 2027
- Introduction
This Privacy Policy explains how we collect, use, store, and protect your personal data when you use any of our websites, platforms, or services.
Our digital services are owned by Child Therapy Practitioners Limited (Company No. 13945877) and operated by Child Therapy Service CIC (Company No. 12067820) under licence. Both organisations are registered at:
14 St Gregory Close, Eastbourne, East Sussex, BN20 7JL, United Kingdom
Child Therapy Service CIC is registered with the Information Commissioner’s Office under registration number ZB177471, in compliance with the UK GDPR and the Data Protection Act 2018.
Our platforms operate across the following addresses:
- Main Website: https://www.childtherapyservice.org.uk
- Learning Portal: https://access.childtherapyservice.org.uk
- Directory: https://directory.childtherapyservice.org.uk
- KidZone: https://kidzone.childtherapyservice.org.uk
- Snapshot: https://snapshot.childtherapyservice.org.uk
By using any of our platforms, you confirm that you have read and understood this Privacy Policy.
- Data We Collect
Directory Providers and Listing Owners
When you create or manage a listing on the Directory, we collect:
- name or business name
- contact information including email address, phone number, and address
- website and social media links
- payment information, processed securely through third-party providers — we do not store card or bank details
Orders, Memberships, and Subscriptions
When you purchase a membership, subscription, or order from us, we collect:
- email address, required for account setup and access
- order history and transaction records
- subscription preferences
- organisation name, for team memberships or verification listings
- logo or profile image, where submitted voluntarily and with consent
For multi-user or team memberships, we issue a single organisational access link. Individual team members are not required to provide personal data unless they choose to create their own account.
Automatically Collected Data
When you use our platforms, we may automatically collect:
- IP address
- browser type and device information
- operating system
- pages visited and interaction data, collected via cookies or analytics tools
- How We Use Your Data
We process personal data for the following purposes:
- managing and publishing directory listings
- verifying professional credentials and membership status
- processing orders, subscriptions, and training access
- issuing certificates and maintaining CPD records
- providing customer support
- sending updates or newsletters where you have consented
- improving website performance and user experience
- meeting legal, tax, and regulatory obligations
We do not sell or rent your personal data to any third party. We do not share personal data for marketing purposes.
- Legal Basis for Processing
We rely on the following lawful bases under UK GDPR:
- Contract — to deliver services, provide access to resources, and manage directory listings
- Legal Obligation — to meet tax, accounting, and regulatory compliance requirements
- Legitimate Interests — to maintain service quality and display verified membership information
- Consent — for newsletters, promotional communications, and the publication of logos, individual names, or photos
Where we rely on consent, you may withdraw it at any time by contacting [email protected]. Withdrawing consent will not affect your access to any paid service.
- The BOUNCE Approach® Verified Members
Child Therapy Service CIC recognises organisations and practitioners who complete verified BOUNCE Approach® training, membership, or partnership programmes.
What we may publish without additional consent
- organisation names may be displayed on BOUNCE Approach® Verified pages to evidence participation, on the basis of Legitimate Interests
What requires your explicit consent
We will only publish the following with your prior written consent:
- logos
- individual practitioner names
- photos or branding assets
Consent can be withdrawn at any time by emailing [email protected]. We never publish personal phone numbers or email addresses.
- Data Storage and Security
We take the security of your personal data seriously and implement the following safeguards:
- SSL encryption across all domains
- secure hosting within the UK or EEA
- role-based access controls
- regular security updates and audits
- encrypted backups
- malware and intrusion detection
- restricted administrative access
- virus checking for all uploaded files
- Your Rights Under UK GDPR
You have the following rights in relation to your personal data:
- Access — to request a copy of the personal data we hold about you
- Rectification — to request correction of any inaccurate or incomplete information
- Erasure — to request deletion of your data, subject to any legal obligation we have to retain it
- Restriction — to request that we limit how we use your data in certain circumstances
- Objection — to object to processing carried out on the basis of Legitimate Interests
- Portability — to request your data in a structured, commonly used format where applicable
To exercise any of these rights, please contact us using the details in Section 12. We will respond within one calendar month in accordance with our obligations under UK GDPR.
If you are not satisfied with our response, you have the right to lodge a complaint with the Information Commissioner’s Office at ico.org.uk or by calling 0303 123 1113.
- Cookies and Tracking
We use cookies to support platform functionality and collect anonymised analytics. A cookie preference banner is displayed on your first visit to our websites, allowing you to manage your choices.
We use Google Analytics to understand how our platforms are used. All analytics data is anonymised. You can opt out of Google Analytics tracking at any time at https://tools.google.com/dlpage/gaoptout.
- Third-Party Services
Payment Processing
Payments are processed securely by third-party providers. We do not store any card or bank account details on our servers. Our payment providers include:
- Stripe — privacy policy available at https://stripe.com/privacy
Comments and User-Generated Content
Where users submit comments or form responses, we collect form information, IP addresses, and browser data to prevent spam and maintain platform security. If a user chooses to use a Gravatar image, this may appear publicly. See https://automattic.com/privacy/ for further information.
- Data Retention
We retain personal data only for as long as is necessary for the purposes for which it was collected, including to:
- provide active services and maintain platform access
- support training records and CPD certificates
- meet legal, tax, or regulatory requirements
- resolve disputes or respond to support enquiries
When data is no longer required, it is securely deleted or irreversibly anonymised. For full details of our retention periods by data category, please refer to our Data Retention and Deletion Policy at www.childtherapyservice.org.uk.
- External Links
Our websites may contain links to third-party websites. We are not responsible for the content or privacy practices of those sites. We recommend that you review the privacy policy of any external site before sharing personal data with it.
- Contact and Complaints
For any data protection enquiries, requests to exercise your rights, or complaints:
Email: [email protected] Phone: 01323 749434 Post: Child Therapy Service CIC 14 St Gregory Close Eastbourne, East Sussex BN20 7JL United Kingdom
If you are not satisfied with how we have handled your data or any request you have made, you may contact the Information Commissioner’s Office directly at ico.org.uk.
- Policy Updates
We may update this Privacy Policy from time to time to reflect changes in legislation, our services, or best practice. The current version will always be available on our website with the date it was last reviewed. Continued use of our platforms following the publication of an updated policy constitutes acceptance of the revised terms.
Last reviewed: May 2026. Next review due: May 2027.