How PJB Therapy uses your information.

Effective from 24 July 2026

Who I am

The data controller is Patrick J Breheny trading as PJB Therapy.

Correspondence address: 43–47 Labyrinth Business Centre, Middle Hillgate, Stockport, SK1 3DG.

Email: info@pjbtherapy.co.uk
ICO registration: ZA751595

Information I collect

I may collect your name, contact details, date of birth, enquiry and appointment information, emergency contact details, therapy or supervision records, health and wellbeing information, safeguarding information and payment records.

I usually receive this information from you. For a young person, I may also receive relevant information from a parent, carer or referrer.

Why I use it

I use personal information to respond to enquiries, decide whether my service is suitable, arrange and provide therapy or supervision, keep appropriate professional records, take payment, manage the practice and meet legal, professional and safeguarding responsibilities.

My lawful bases are taking steps at your request and performing our contract, complying with legal obligations, and my legitimate interests in running a safe and accountable practice. Health information is special category data. I use it where necessary to provide health or social care under professional confidentiality, or to establish, exercise or defend legal claims. Where I rely on consent, you can withdraw it at any time.

I do not sell personal information or use it for automated decision-making.

Confidentiality and sharing

I keep your information confidential. I may share the minimum necessary information with my clinical supervisor, service providers, professional advisers, insurers or public authorities. I may also disclose information where the law requires it, a court orders it, or there is a serious safeguarding or safety concern.

Services used by the practice include Google Workspace, Google Calendar, Google Meet, Google Drive, Microsoft Teams, Bilateral Base, RemotEMDR, Stripe, QuickBooks and reMarkable Cloud. Bank-transfer details are processed by the relevant banks. These organisations process information under their own security and privacy arrangements.

Some providers may process information outside the UK. Where this happens, I rely on UK adequacy regulations or approved contractual safeguards.

Rebuild After Addiction on Skool

Rebuild After Addiction is hosted on Skool, which acts as the platform or provider for the community, course and subscription service. For that community I may process membership, moderation, payment and support records, including Skool profile name, account identifier, membership tier, manual approval answers, posts, comments, reactions, course progress, attendance notes, non-clinical community records and minimum-necessary non-clinical incident records.

The purpose of that processing is to manage membership and access, provide the requested services, moderate the community, respond to member questions and complaints, protect members and meet legal, professional and safeguarding responsibilities, and keep minimum-necessary community records. Routine participation in the community does not create a clinical record.

Skool and its providers may process information outside the UK under their own terms and privacy information. I rely on those provider terms and safeguards where that happens, including any international transfers described in the provider terms.

For the public summary of the approved member terms and privacy addendum, see Rebuild After Addiction terms and privacy summary.

How I store information

Records may be kept on encrypted computers, in Google Drive, on a reMarkable device using reMarkable Cloud, or as paper records in a secure filing system. I use reasonable technical and organisational safeguards to protect them.

How long I keep it

I keep clinical records for seven years after therapy ends. If you were under 18 when therapy ended, I keep them until seven years after your 18th birthday. I may keep information longer if it is needed for an active complaint, safeguarding matter or legal claim.

I keep other information only for as long as it is needed for the purpose for which it was collected, including legal, tax, accounting and insurance requirements. I review records and securely delete or destroy them when they are no longer needed.

Children and young people

PJB Therapy works with people aged 11 and over. I explain privacy and confidentiality in a way the young person can understand. Parent or carer involvement depends on the young person’s circumstances, understanding, agreement and any safeguarding responsibilities.

Your rights

You may have the right to ask for a copy of your information, correct it, restrict its use, object to its use, ask for it to be deleted, or receive it in a portable format. These rights are not absolute, and I may need to verify your identity.

Contact info@pjbtherapy.co.uk to make a request. You can also complain to the Information Commissioner’s Office.

This website and analytics

The website’s hosting provider may process basic technical logs needed to deliver and protect the site. Please do not send detailed clinical information by ordinary email.

PJB Therapy uses Google Analytics 4 only after you choose to accept analytics. It helps me understand visits, traffic sources and limited actions such as opening the contact page or selecting an email, telephone or enquiry link. I do not send names, contact details, form content, therapy information or other health information to Google Analytics.

The legal basis for optional analytics storage and access is your consent. You can reject analytics or change your choice at any time by selecting Manage analytics choices in the website footer. Analytics remains off if you do not accept.

Google may process device, browser, approximate location, page, referral and campaign information and may process information outside the UK under its applicable safeguards. PJB Therapy’s GA4 event-level retention setting is two months. The local record of your analytics choice and analytics cookies, if accepted, are limited to approximately six months.

Updates

I may update this notice when the law, my services or the systems I use change. The current version will be published on this page.