BeeLeaf Institute for Contemporary Psychotherapy understands that your privacy is important to you and that you care about how your personal data is used and shared online. We respect and value the privacy of everyone who visits this website. Thank you for trusting us with some information about yourself.
Who are we?
We are BeeLeaf Institute for Contemporary Psychotherapy which is the trading name for BeeLeaf Training Ltd. Our registered address is 4a Roman Rd London E6 3RX. Our Directors are Pamela Gawler-Wright and Mandy-Jane Herring.
What Data Do We Collect ?
All personal data is processed and stored securely, for no longer than is necessary in light of the reason(s) for which it was first collected. Our use of your personal data will always have a lawful basis, either because it is necessary for our performance of a contract with you, because you have consented to our use of your personal data (e.g. by subscribing to emails, submitting a course application), or because it is in our legitimate interests.
When you apply to become a Student and enrol on a training course with us you will be asked to provide some further information about yourself such as that listed below. We need this information so we can provide you with an enrolment agreement and receive payment from you in accordance with that agreement. We also need the information to identify you and communicate with you in relation to services and products that you are entitled to under the terms of the enrolment agreement.
Date of birth
Contact information such as email address, land address and telephone number
Employment history, academic & relevant qualifications
Membership of professional registers
Physical health conditions, mental health conditions
Reasons for wanting to enrol on a training course with us
References that include name and contact details and of the Referees
If you are a Member of our Register; Community for Contemporary Psychotherapy (CCP) you may choose to create an account using your name and email address in order to access the Member only resources area of our site. As a Member you may advertise your professional services on our Directory of Therapists on our site where you can choose how much personal data you wish to make publicly available.
Financial and Credit Card Details
We do not receive or store your credit/Debit card details. Card payments are handled by an external secure processor ‘Paypal’ in accordance with their data security policies. So this means that when you buy something on our website you are redirected to the Paypal website to make the payment.
We receive limited information from our processor ‘Paypal’ for us to tie up your payment with your invoice. If you pay us by BACS or direct transfer, we know only what the bank tells us, which is usually the name of the person who paid us and how much and the reference number.
How and Where Do We Store Your Data?
We only keep your personal data only for as long as we need to in order to use it as described above and/or for as long as we have your permission to keep it.
We use mainstream software platforms and companies that meet the strict security standards required under GDPR law. Your data will be stored in the U.K and the European Economic Area (EEA). If we do store data outside the EEA, we will take all reasonable steps to ensure that your data is treated as safely and securely as it would be within the U.K and under the GDPR. For example, some may be held in services in the USA (with suitable data privacy shields).
Do We Share Your Data?
We do not sell or exchange your personal data with organisations who may want to sell you something or use your data for research or other purposes except when in certain circumstances, we may be legally required to share certain data held by us, which may include your personal data, for example, where we are involved in legal proceedings, where we are complying with legal obligations, a court order, or a governmental authority.
We have an outsourced support team, which may include Virtual Assistants, Telephone Answering Service, Web Designers, IT support, Sales and Marketing, Accounting, Teaching, Assessors and more. They have limited access to your data, where the service they provide to us means they need it.
For example, if we invoice you, our Accountant needs to process the information in the invoice. If you telephone us our call answering service may ask for your name and telephone number so we can respond to your call. If you apply for a training course with us our training management team need to know particular information about you to assess if the course is suitable for you. Your information/advice is held in the strictest confidence and our team are all contracted to strict confidentiality clauses.
We are regularly audited by our professional accrediting body ; UKCP who may ask to see samples of course work to ensure we are meeting their standards. In such cases your identity will remain anonymous.
We need to keep information long enough to satisfy HMRC, our insurers and professional bodies and provide the goods and services you have purchased from us. We therefore retain customer data for up to 10 years.
We keep information on prospective customers long enough to make our sales enquiry system effective which is 5 years. After 5 years if you become a customer we will retain the data we have about you. If you have not become a customer at the end of that period your data will be securely deleted. If you subscribed to a newsletter or updates list, or you have provided your data on our Directory of Therapists on our website you will remain on the list(s) / Directory you joined until you unsubscribe from that list / Directory.
As a data subject, you have the following rights under the GDPR, which this Policy and our use of personal data have been designed to uphold:
The right to be informed about our collection and use of personal data;
The right of access to the personal data we hold about you .
The right to rectification if any personal data we hold about you is inaccurate or incomplete (please contact us using the details at the end of this policy).
The right to be forgotten – that does have some legal limits to it. If you want us to remove information about you, let us know. If you have been a customer, we may not be able to remove all data as we will have to ensure that we can continue to comply with legal, accounting, taxation and our insurer’s requirements.
The right to restrict (i.e. prevent) the processing of your personal data;
The right to data portability (obtaining a copy of your personal data to re-use with another service or organisation);
The right to object to us using your personal data for particular purposes;
Rights with respect to automated decision making and profiling.
If you have any cause for complaint about Our use of your personal data, please contact us using the details provided at the end of this policy and we will do our best to solve the problem for you. If we are unable to help, you also have the right to make a complaint with the UK’s supervisory authority, the Information Commissioner’s Office (ICO).
How Can You Control Your Data?
In addition to your rights under the GDPR, described above, when you submit personal data via our website, you may be given options to restrict our use of your data. In particular, we aim to give you strong controls on our use of your data for direct marketing purposes (including the ability to opt-out of receiving emails from us which you may do by unsubscribing using the links provided in our emails and at the point of providing your details and by managing your Account.
Your Right to Withhold Information
You may access certain areas of our site without providing any data at all. However, to use all features and functions available on our site you may be required to submit or allow for the collection of certain data.
How Can You Access Your Data?
You have the right to ask for a copy of any of your personal data held by us (where such data is held) and we will provide any and all information in response to your request free of charge. Please contact us for more details at firstname.lastname@example.org, or using the contact details at the end of this policy.