The International Association for Evidence Based Psychotherapy (hereinafter referred to as “the IAEBP”) treats the privacy of its members and website users very seriously and we take appropriate security measures to safeguard your privacy. This Policy explains how we protect and manage any personal data* you share with us and that we hold about you, including how we collect, process, protect and share that data.
‘Personal data means any information that may be used to identify an individual, including, but not limited to, a first and last name, a home or other physical address, an email address or other contact information (whether at work or at home).
How we obtain your personal data
Information provided by you
You provide us with personal data either on your application form, renewal form, via an online application or renewal form, by email communication or over the telephone (we do not record telephone conversations). We may also keep information contained in any correspondence you may have with us by post.
Mobile and/or landline telephone number,
Forum username and Password(if supplied by us)
Record of membership subs paid
A copy of your membership application form
A record of your CRB and DBS clearances
A copy of any official complaints about you or your practice. Any such complaint will have been discussed with you and dealt with. There are no secret files.
We record this information in a computer database (locally/off-line) and use this information in order to manage and administer your membership whilst you remain a member of the IAEBP. We also display information about your business contact details on our publicly available Therapist Directory on our website. Please also see the ‘How long do we keep this information about you?’ section below.
How we use your personal data
We use your personal data to manage and administer your membership. This includes the collection of payments and verifying your identity when you contact us to discuss your membership.
How long do we keep this information about you?
We keep your information indefinitely after any lapse of membership. This is retained to enable verification of yourself as a previous member should you wish to re-join the Association or to prove that you were qualified to practice in the past. There is a lack of data about who has received IAH and IAPH diplomas in the past so membership data becomes more useful. A continuous review of the personal information held will be undertaken and any information which is no longer required for the above reasons will be disposed of securely.
Data subject rights
Subject access requests
You have the right to ask for all the information we have about you and the services you receive from us. When we receive a request from you (which must be in writing) we must give you access to everything we’ve recorded about you. Our formal response shall include the following:
– details of the personal data we hold about you;
– sources from which we acquired the information;
– the purposes for processing the information; and
– persons or entities with whom we are sharing the information.
Ask for inaccurate information to be corrected
You have the right to obtain from us, without undue delay, the rectification of inaccurate personal data we hold about you.
You can ask us to delete information
In some circumstances you can ask for your personal information to be deleted, for example:
– Where your personal information is no longer needed for the reason why it was collected in the first place.
– Where you have removed your consent for us to use your information.
– Where there is no legal reason for the use of your information.
– Where deleting the information is a legal requirement.
Please note that we can’t delete your information where:
– We’re required to have it by law.
– It is for, scientific or historical research, or statistical purposes where it would make information unusable.
– It is necessary for legal claims.
Where data has been shared
We shall communicate any rectification or erasure of personal data or restriction of processing as described above to each recipient to whom the personal data has been disclosed.
Right to data portability
You have the right to receive your personal data, which you have provided to us, in a structured, commonly used and machine-readable format and have the right to transmit this data to another controller, without hindrance from us.
Right to object
You shall have the right to object, on grounds relating to your particular situation, at any time to the processing of personal data concerning you, including any personal profiling; unless this relates to processing that is necessary for the performance of a task carried out in the public interest or an exercise of official authority vested in us. We shall no longer process the personal data unless we can demonstrate compelling legitimate grounds for the processing, which override the interests, rights and freedoms of you, the data subject, or for the establishment, exercise or defence of legal claims.
Right to not be subject to decisions based solely on automated processing
We do not carry out any automated processing, which may lead to an automated decision based on your personal data.
Who to contact
If you would like to contact the Association about any of the above please write to the Administrator, IAEBP, 1 Castle Road, Southampton, SO18 1QP.
Accuracy of information
In order to provide the highest level of membership support, we need to keep accurate personal data about you. please help us with this by keeping us informed of any changes when they occur.
Questions and queries
If you have a complaint
If you have a complaint regarding the use of your personal data then please contact us by: Writing to: The Administrator, IAEBP, 1 Castle Road, Southampton, SO18 1QP or email: firstname.lastname@example.org And we will do our best to help you.
If your complaint is not resolved to your satisfaction and you wish to make a formal complaint to the Information Commissioners Office (ICO), you can contact them on 01625 545745 or 0303 123 1113. You also have the right to judicial remedy against a legally binding decision of the ICO where you consider that your rights under this regulation have been infringed as a result of the processing of your personal data. You have the right to appoint a third party to lodge the complaint on your behalf and exercise your right to seek compensation.
(Version date: May 2018)