CHALLENGING BEHAVIOUR SOLUTIONS LTD

Privacy Policy

Effective Date: 13/05/2025

1. Introduction

Welcome to Challenging Behaviour Solutions Ltd (CBSL). We value your privacy and are committed to protecting your personal data. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website cbsl.org.uk, use our services, or interact with us in any other capacity.

CBSL complies with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

2. Information We Collect

a. Personal Data

We may collect personal information that you voluntarily provide to us, including but not limited to:

  • Your name
  • Email address
  • Phone number
  • Postal address
  • Details submitted via forms or communications with us

This may include sensitive data, such as information relevant to support planning, where applicable and with explicit consent.

b. Usage Data

We may automatically collect information about how you interact with our website, such as:

  • IP address
  • Browser type
  • Device identifiers
  • Pages visited
  • Time and date of access
  • Referring URLs

3. How We Use Your Information

We process your personal data for the following purposes:

  • To provide and manage our services and support plans
  • To respond to your inquiries and provide customer service
  • To communicate updates, service changes, and newsletters (where consented)
  • To analyse usage data and improve our services and website
  • To meet legal, regulatory, or contractual obligations

4. How We Share Your Information

CBSL does not sell or trade your personal data. However, we may share your information under the following circumstances:

a. Service Providers (Subprocessors)

We use trusted third-party providers to support delivery of our services and automate internal operations. These may include:

  • Zapier – for workflow automation
  • HubSpot – for CRM and communication
  • Make.com – for integration between platforms
  • Microsoft 365 – for secure communication and file handling
  • PayItMonthly – for payment plans

All subprocessors are contractually required to comply with data protection laws and implement adequate security measures.

b. Legal Requirements

We may disclose personal data if required to do so by law or if we believe such action is necessary to comply with a legal obligation, protect and defend our rights or property, or safeguard users and the public.

5. Data Security

We take appropriate technical and organisational measures to protect your data, including secure storage, access controls, encryption, and staff training. While we strive to protect your personal data, no method of transmission over the internet is entirely secure.

6. International Data Transfers

Some of our subprocessors (e.g., Zapier, HubSpot) may store or process data outside the UK/EEA. In such cases, we ensure that appropriate safeguards are in place, including UK-approved Standard Contractual Clauses (SCCs) and Data Processing Agreements.

7. Your Rights

You have the right to:

  • Access the personal data we hold about you
  • Request corrections to inaccurate data
  • Request erasure of your data, where appropriate
  • Object to or restrict certain processing activities
  • Withdraw consent where processing is based on consent
  • Lodge a complaint with the Information Commissioner’s Office (ICO)

To exercise any of your rights, please contact us at dataprotection@cbsl.org.uk.

8. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. Updates will be posted on this page with a revised “Effective Date.” We encourage you to review this page periodically.

9. Contact Us

If you have any questions or concerns about this Privacy Policy or how we handle your data, please contact us:

Challenging Behaviour Solutions Ltd

Email: dataprotection@cbsl.org.uk