This Privacy Policy explains how ConfidTherapy LTD (“we”, “us”, “our”) collects, uses, and protects your personal data when you use our website at confidtherapy.co.uk, register your interest in ConfidTherapy or ConfidResearch, or contact us directly.

We are committed to protecting your privacy and processing your data in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

1. Who We Are

Data Controller: ConfidTherapy LTD
Company No. 17179796  ·  Registered in England & Wales
71-75 Shelton Street, Covent Garden, London, WC2H 9JQ
Email: info@confidtherapy.co.uk

If you have any questions about this policy or how we handle your data, please contact us at the address above.

2. What Data We Collect

We collect the following categories of personal data depending on how you interact with us:

Category	Data collected	Source
Identity	First name, last name	Register-interest form
Contact	Email address	Register-interest form
Professional	Professional role, accrediting body (e.g. BACP, BPS), research discipline, institution name	Register-interest form (optional)
Usage & preferences	Scorecard responses (anonymised practice/research profile answers), user-agent string	Register-interest form
Technical	Hashed IP address (SHA-256, salted — not reversible to your IP)	Automatically on form submission

We do not collect sensitive personal data (as defined by UK GDPR Article 9) through this website, including health data, racial or ethnic origin, or biometric data.

3. How We Use Your Data

Purpose	Lawful basis (UK GDPR)
To send you early access updates, product news, and invite you to join ConfidTherapy or ConfidResearch	Consent (Article 6(1)(a)) — you provide this via the checkbox on the register-interest form
To understand our prospective user base and improve the product	Legitimate interests (Article 6(1)(f)) — to build a product that genuinely serves UK therapists and researchers
To detect and prevent spam or fraudulent submissions	Legitimate interests (Article 6(1)(f))
To comply with legal obligations	Legal obligation (Article 6(1)(c))

4. How Long We Keep Your Data

We retain register-interest data for a maximum of 3 years from the date of submission, unless you ask us to delete it sooner. We review our marketing list annually and remove contacts who have not engaged with any communication.

Technical logs (containing hashed IP addresses) are retained for up to 90 days for security and fraud-prevention purposes.

5. Who We Share Your Data With

We do not sell, rent, or trade your personal data to any third party.

We may share your data with the following categories of trusted third-party processors who act on our instructions and are bound by data processing agreements:

• Sendamatic — transactional email delivery service (used to send you product updates and early access invitations)
• Krystal Hosting — UK-based web hosting and database provider where your data is stored

All data is stored on UK-based servers. We do not transfer your personal data outside the United Kingdom.

6. Your Rights

Under UK GDPR you have the following rights in relation to your personal data:

• Right of access — to request a copy of the data we hold about you
• Right to rectification — to ask us to correct inaccurate data
• Right to erasure — to ask us to delete your data (“right to be forgotten”)
• Right to restrict processing — to ask us to pause processing your data
• Right to data portability — to receive your data in a structured, machine-readable format
• Right to object — to object to processing based on legitimate interests
• Right to withdraw consent — where we rely on consent, you can withdraw it at any time without affecting the lawfulness of prior processing

To exercise any of these rights, please contact us at info@confidtherapy.co.uk. We will respond within 30 days.

7. Withdrawing Consent

If you registered your interest and wish to be removed from our mailing list, you can:

• Email us at info@confidtherapy.co.uk with the subject “Unsubscribe”
• Click the unsubscribe link in any email we send you

We will process removal requests within 5 working days.

8. Cookies and Tracking

Our marketing pages do not currently use tracking cookies, advertising pixels, or analytics scripts. We do not use Google Analytics on this website.

If we introduce any cookies or tracking technologies in future, we will update this policy and display a cookie consent notice before any non-essential cookies are set.

9. Security

We implement appropriate technical and organisational measures to protect your personal data, including:

• HTTPS encryption for all data in transit
• AES-256 encryption for data at rest within the ConfidTherapy platform
• IP address hashing (SHA-256 with a salt) — we store a hash, not your actual IP address
• Access controls limiting who within ConfidTherapy LTD can access personal data

10. Children

Our services are directed at adult professionals (therapists, researchers, PhD students). We do not knowingly collect personal data from anyone under the age of 18. If you believe we have inadvertently collected data from a minor, please contact us immediately.

11. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will update the “Last updated” date at the top of this page. For significant changes, we will notify registered-interest contacts by email.

12. Right to Complain

If you are unhappy with how we handle your personal data, you have the right to lodge a complaint with the UK Information Commissioner’s Office (ICO):

We would, however, appreciate the opportunity to address your concerns before you contact the ICO — please reach out to us first at info@confidtherapy.co.uk.

13. Contact Us