When you sign up for a course through this website, I collect personal information from you as part of the enrolment process. If you sign up for my newsletter or use my contact form, the data is collected on the relevant form.

In handling this information, I am bound by two sets of rules, the General Data Protection Regulations (GDPR) and my professional body’s code of ethics. This page will explain how these affect the way I work.

  • My company, Yorkshire Therapies & Training Ltd, is registered with the ICO https://ico.org.uk/ESDWebPages/Entry/ZA230146.
  • I am both the Data Controller and the Data Protection Officer. My contact details are Debbie Waller, email debbie@cpd.expert, phone 01977 678593.
  • The information about you that I collect comes from:
    • you, if you email or phone me, or use a form on this site,
    • a third party, if you sign up for a course through them (for example, your employer or the cpd4therapists website),
    • PayPal, or Stripe, if you use one of the buttons on the site: all these transactions are subject to the PayPal and Stripe Privacy Policies.
  • You have no legal requirement to share information with me, but if you do not you will not be able to enrol on a course.
  • Online forms and newsletter sign-ups collect your name and contact details. Order buttons collect these plus details of the payment you are making. The purpose of collecting this information is:
    • to answer your enquiries,
    • to provide you with the course materials,
    • to administer courses once you are enrolled,
    • to provide support and supervision,
    • to enable me to invoice you, receive payment, and keep proper records and accounts.
    • to send you my monthly newsletter,
  • The lawful basis of my collecting and processing data is consent or contract or legitimate interests. You consent to my holding and using your information when you submit an online form; clicking a Paypal button creates a contract to supply goods or services which I cannot do without using your data; photographs of those attending workshops are sometimes used for promotional purposes, which is a legitimate interest of my business; if you email, phone or contact me via social media with enquiries it is a legitimate interest of my business to use your contact details to reply to you. 
  • I keep the information you give me for seven years, which is the length of time suggested by my professional body and insurance company for client records: they don’t have separate advice for trainers.
  • Sharing your information:
    • Some courses have external tutors and, if you sign up for one of these, your name and contact details will be shared with them. Course tutors are clearly identified on the site but if you are not sure, please ask about this before enrolling.
    • If a third party (e.g. an employer or someone offering training grants) is involved in your enrolment or in paying for your course, I will share relevant information with them.
    • I maintain the same level of confidentiality for those undertaking training with me as I do for clients, which means that I only divulge personal information where there is a legal requirement for me to do so, e.g. where the Children’s Act applies or a court order is issued, or when there is good cause to believe that if I do not disclose information you or others would be exposed to a serious risk of harm. If any of these situations arise, I will share your data with the relevant authorities.
    • Online course sales are administered via Payhip, an online e-commerce platform, and are administered through their servers – you can read their privacy policy HERE.
    • Online enquiry forms are powered by Jotforms and are processed through their servers, your messages are encrypted before being sent to us – read their privacy policy HERE
    • Our newsletter is administered via MailChimp, your information is stored on their servers – read their privacy policy HERE
    • Financial accounts are kept on Zoho. Your name, email, and address are used to keep our accounts accurate. Zoho’s privacy policy is HERE.
    • Our quizzes, surveys, and forms are created using Quiz And Survey Master.
      • In order to distinguish individual users, IP addresses are collected and stored with the responses. Each individual form may have fields for a variety of other personal information, such as name and email. This data is needed to identify and possibly communicate with the user.
      • There may be other fields asking for personal information and this data may be for different purposes for each quiz, survey, or form. If any data is to be used for purposes other than grading or survey purposes, this will be disclosed on the form itself.
      • The responses and data attached to the responses are stored indefinitely until an administrator of this site deletes the responses.
    • If I am temporarily or permanently rendered incapable of acting (e.g., by ill health or death), my therapeutic executor (David Waller) will be given access to your contact details.
    • You have rights over the information I hold about you. These are:
      • Portability – you can ask me to send your information to someone else,
      • Rectification – if you think my records are wrong you can ask me to change them,
      • Erasure – in some circumstances you can ask me to remove your details from my records (this is sometimes called ‘the right to be forgotten’). If your only contact with me is my newsletter and you unsubscribe, all your data will be removed automatically by the MailChimp system,
      • Fair profiling – you can ask that any processes I automate are done by a person instead of a computer. I don’t currently automate any information processing, although I do use online forms to collect information,
      • Right of access – you can have a copy of the information I hold at any time, by requesting it in writing. If you do this it will be provided within 30 days and free of charge,
      • Restricting processing – in some circumstances you can request that I stop processing your information,
      • Objection – you can object to the way I process information (e.g. if it is used to send you direct marketing and you don’t want to receive this) and can ask me to stop using it in the way,
      • Information – you have the right to understand how I collect and process your information (hence this privacy notice).
  • You can learn more about these rights on https://ico.org.uk/for-organisations/guide-to-the-general-data-protection-regulation-gdpr/individual-rights/
  • You can withdraw your permission for me to use your information at any time, although it would mean leaving a course if you are still a student.
  • You have a right to complain to the ICO if you have any problem with the way I store or use your data, or if you do not think your rights are being respected.

Updated April 2021 to reflect the addition of an e-commerce platform for automated course delivery after purchase.

Updated July 2025 to remove references to COVID-19 track and trace provisions.

Updated August 2025 to reflect the addition of online accounting to our admin systems.

More about privacy – our use of cookies