Privacy Notice
Last modified 13th April 2019
1 Contents
1 Contents
2 Introduction
2.1 Data controller
2.2 Lawful basis for processing
2.3 Individual rights
2.4 Security
2.5 Disclosures
2.6 Changes to this privacy policy
3 Cookies
4 Data collected by third parties on our behalf
4.1 Spoton.net
4.2 Cloudflare
4.3 Google Analytics
5 Other data collected by third parties
5.1 Mapbox maps
5.2 YouTube video player
2 Introduction
We aim to protect personal data that we process in line with UK Data Protection law. This privacy notice documents the personal data we collect, why and how we process it, and how to exercise your rights.
This privacy notice was drafted with brevity and clarity in mind. If you would like more details, please let us know.
2.1 Data controller
The data controller responsible for this website is the National Society of Psychotherapists (NSPsy), who can be contacted at:
Mail: 83 Woodlands Avenue, West Byfleet, Surrey, KT14 6AP,
Email: info@nspsy.org.uk
Telephone: 0208 133 0242???
Our ICO Registration Number is ???.
This website contains links to third-party websites, which have their own data controllers and privacy notices. This privacy notice applies only to personal data controlled by NSP.
2.2 Security
We implement a wide range of organisational, technical, physical and operational controls to protect the confidentiality, integrity and available of personal data that we process. Further details can be made available to individuals and companies that we work with.
2.3 Disclosures
In addition to any sharing of data described elsewhere in this privacy policy, we may disclose data for legal reasons. If we suspect criminal activity or we believe lives are at risk, we may disclose data relating to those involved or affected to the appropriate authorities. We may also be obliged to disclose data if we receive a request from an appropriate authority.
2.4 Changes to this privacy notice
We regularly review our privacy notice to make sure it is up-to-date and accurate. We reserve the right to update our privacy notice at any time. Following any changes, the date at the top of this privacy policy will be updated. We will notify data subjects by email if major changes occur to the way we process personal data.
3 Our Processes
|
Purpose of Processing |
Data Categories |
Lawful Basis |
Retention Period |
|
Website security and performance |
Visitor IP address, pages, dates |
Legitimate Interest |
6 months? |
|
Membership Applications |
Name, contact details, qualifications, discussions |
Contract |
24 months? |
|
Membership |
Name, contact details, qualifications, discussions |
Contract |
X years after membership ends |
|
Society queries |
Name, contact details, discussions |
Legitimate Interest |
6 months or 2 years? |
|
Data subject requests |
Name, contact details, discussions |
Legitimate Interest |
2 years? |
|
Direct marketing? (discussion required… email/phone/text) |
|
|
|
|
Social media group discussions |
|
|
|
|
Events |
|
Legitimate Interest |
|
|
Others |
|
|
|
All personal data is processed in the UK only?
We do not intend to process any sensitive data or personal data of our member’s clients.
4 Third Parties
We use specialist third party processors to host our website and email, and for improved IT security and website performance, Further details can be made available to individuals and companies that we work with.
Our website also contains inserts from Mapbox and YouTube. They are the Controllers of any data they collect. Further details are available on their privacy notices (web links?)
5 Your rights
Under data protection law, you have the right to request:
• Details of how we process data, including any automated processing, which is covered by this privacy notice.
• A copy of the data we hold about you, or to have that data transferred to a third party.
• To amend, erase or cease processing of your data.
We endeavour to verify any requestor’s identity and to securely complete any requests within 28 days, normally without charge.
You also have the right to escalate any complaints about our handling of personal data to our data protection manager, Keith Dewey, who can be contacted using the details above, or to the UK supervisory authority (www.ico.org.uk)
If you do have any concerns or questions, please do contact us directly.