Your privacy matters

Driven by policy, protected by our high standards

(last updated November 2021)

Who we are

Our company is registered with Companies House; Company Registration Number SC628636 (Scotland)

We are also registered with the Information Commissioner’s Office (ref. ZA516485), and are required to comply with legislation to protect your information. The nature of our service means that we collect personal data; we are committed to protecting your details, from the point of enquiry to the close of treatment provided, and to be transparent about our processes.

This Policy explains what information we collect, how this information is used, retained, and stored.            If you have any questions or concerns about this policy, please email us at


 What information do we collect?

Personal identification data (name, address, date of birth, contact details) and sensitive personal data (health information, race, religion, background, culture, business/employment information, and financial data connected with payment processes).

You directly provide this information via initial enquiry forms (containing personal data), and via self-referral forms and clinical questionnaires (containing sensitive data). Our email correspondence during a treatment plan is likely to contain sensitive data in addition to an exchange of contact details etc.

We do not collect data on how you interact with our online content (website or social media) via your browser cookies. We do not retain your details for the purposes of marketing/advertising.

Data security and Exceptions

Data is securely stored at our premises in line with internal procedures informed by legislation.                This pertains to handling of hard copy data as well as procedures for technology use.                                  Where your care is commissioned by a Third Party, we may be required to submit reports.                          On all occasions and under all circumstances, we will discuss with you at the start of treatment how we will record and retain your information, and when/what we are required to disclose to any other organisations.  This is documented and agreed in our Therapy Consent form.

Inactive and/or Closed treatment plans (ie when you are discharged) are archived within the current legislative requirements. Email correspondence is deleted at this stage.                                                          Exceptions to this privacy policy relate to our safeguarding and risk-management policy which will also be discussed with you at the start of treatment, and documented in our Therapy Consent form. 


Your rights

You have the right to request copies of your personal and sensitive information held by Oban CBT Clinic. You will be charged a small fee to cover administrative costs in preparing these documents.

You have the right to rectification of any inaccuracies, and to add to information that you find to be incomplete.

Under certain conditions, excluding our legal obligation to maintain therapy records for a fixed period, you have the right to request erasure of your information.

We will respond to written requests relating to your rights, within one month of receiving your request. Contact us at

We endeavour to work with you to resolve any issues but where this is not to your satisfaction you are directed to


Security at our premises

Please be aware of the temporary storage of video footage; this is held for no longer than seven days and is intended to enhance safety of staff working at Oban CBT Clinic Ltd. No audio files are recorded, images are not shared with anyone other than in the event of compliance with legal requirements (eg on request by Police Scotland). Signage alerting visitors to CCTV is clearly visible on entering the premises.