Privacy Notice

Wikus Nortje CBT
Email: hello@wikusnortjecbt.co.uk
Website: www.wikusnortjecbt.co.uk
ICO registration reference: ZC171097

Last updated: June 2026

Wikus Nortje CBT is a private CBT therapy practice offering online Cognitive Behavioural Therapy to adults.

I am the data controller for the personal information you provide to me. This means I am responsible for deciding how your personal information is collected, stored and used.

I may collect and hold the following information:

• Your name and contact details
• Your date of birth
• Your GP details
• Emergency contact details
• Information you provide in enquiry forms, emails or booking forms
• Information discussed during assessment and therapy sessions
• Clinical notes and therapy records
• Questionnaires or outcome measures completed as part of therapy
• Payment and appointment information

Because therapy involves health and wellbeing, some of the information I collect is classed as special category data under UK data protection law.

I collect and use your information to:

• Respond to enquiries
• Arrange consultations and appointments
• Assess whether CBT is appropriate for you
• Provide safe and effective therapy
• Keep accurate clinical records
• Manage payment and appointment administration
• Meet professional, legal and regulatory responsibilities
• Respond appropriately if there is a serious risk of harm

My lawful basis for using your personal information is usually that it is necessary to provide therapy services to you and to manage the agreement between us.

For special category health information, I process this because it is necessary for the provision of health or social care treatment.

In some circumstances, I may also process or share information where there is a legal obligation, or where it is necessary to protect you or someone else from serious harm.

Therapy is confidential. I will not normally share information about you without your consent.

There are some important exceptions. I may need to share information if:

• There is a serious risk of harm to you or another person
• There is a safeguarding concern involving a child or vulnerable adult
• I am required to do so by law or court order
• There is a serious crime or terrorism-related concern
• I need to discuss aspects of my clinical work in professional supervision

Where possible, I would usually try to discuss this with you first.

As part of safe and ethical practice, I may discuss my clinical work with a qualified clinical supervisor. This is done to support good practice and client safety. Identifying details are kept to a minimum wherever possible, and supervision is also confidential.

Your information is stored securely using password-protected systems. I take reasonable steps to protect your information from unauthorised access, loss or misuse.

Email and online communication can never be guaranteed to be completely secure, so please avoid sending highly sensitive information by email or website form.

Clinical records are usually kept for 7 years after therapy ends.

After this time, records will be securely deleted unless there is a legal or professional reason to keep them for longer.

Enquiry information from people who do not go on to start therapy may be deleted sooner.

If you pay for therapy, I may hold basic payment and invoice information for accounting and tax purposes. I do not store full card details.

This website may collect basic technical information, such as browser type, device information and website usage data. This helps the website function properly and understand general visitor activity.

If cookies or analytics are used on this website, you may be asked to accept or manage your cookie preferences.

I will not sell your information or use it for marketing unrelated services.

I may share limited information with:

• Your GP or emergency services, if there is a serious risk concern
• Safeguarding services, if required
• My clinical supervisor
• Professional, legal or regulatory bodies, if required
• Secure administrative or clinical systems used to provide the service

Only the minimum necessary information will be shared.

Under UK data protection law, you have rights over your personal information. These may include the right to:

• Access a copy of your personal information
• Ask for inaccurate information to be corrected
• Ask for information to be deleted in some circumstances
• Ask for processing to be restricted in some circumstances
• Object to certain uses of your information
• Complain to the Information Commissioner’s Office

Some rights may be limited where clinical, legal or safeguarding responsibilities apply.

If you have any questions about this Privacy Notice or how your information is used, please contact:

Wikus Nortje CBT
Email: hello@wikusnortjecbt.co.uk

If you are unhappy with how your personal information has been handled, please contact me first so I can try to resolve the concern.

You also have the right to complain to the Information Commissioner’s Office.