Data Protection Policy

Bristol CBT Clinic for Young People aims to be as clear as possible about how and why personal information about you is held, so that you can be confident that your privacy is protected. This policy describes the information that is collected when you contact us and when you or your child attends the Clinic.

Our responsibilities to keep and store your information securely

​Bristol CBT Clinic is required to inform you under Data Protection Laws about the information we collect and store about individuals, and what we are likely to do with this information.  We are required to collect and store personal information as part of health records required for CBT assessment and treatment, which are kept in accordance with legal requirements set out in Regulation 20 of the Health and Social Care Act 2008 (Regulated Activities) 2010.

​When people enquire about the Bristol CBT Clinic and the Service we provide, we keep contact details of the person enquiring on a secure database, including the name of the person enquiring and their telephone contact and/or email address. This data will not be shared with any other agencies and will only be used to monitor and communicate with people enquiring about our Service.

What information do we store and how is it kept secure?

We collect information that is essential to our provision of CBT assessment and therapy, including the names of the individual client and their families, their home address and contact details (telephone numbers, email addresses), and assessment information relevant to formulation and treatment planning.  When necessary, we may also with the young person and parent’s permission, obtain information from other agencies, including schools, GP’s and other health or social care professionals.

This information is stored securely in paper files, electronic files and memory sticks. Confidential paper files and memory sticks are kept in locked filing cabinets in secure premises and electronic files are kept on password protected personal computers housed in secure premises.

Sharing of information

The information we collect is stored solely for the purpose of providing effective CBT treatment for the individuals concerned and will not be used for any other purpose nor shared with anyone without the young person’s / parent’s permission.  The exception to this, is if there are serious safeguarding issues and the sharing of information is necessary to ensure the safety of the child / young person or other people.

Information may be communicated with the young person or parents (where appropriate) by telephone, post or email, and consent for the sharing of information in these ways will be gained during the assessment process. By emailing an enquiry, we assume consent to reply by email even if this includes personal information.

Your rights

Individuals can choose to withdraw their consent for the storing and sharing of information, but this may impact on the feasibility of continuing to provide CBT treatment.  There is a legal requirement for us to keep health records during treatment and for a period of time following treatment (usually 7 years) after which records will be disposed of securely. The individual client has a right to request access to their records at any time.

Please contact the CBT Clinic if you have any queries or objections about how your data is being stored. All individuals have a right to complain to the Information Commissioning Office if they think there is a problem with how we as an organisation is handling their data.