Privacy notice

Updated: September 2026

Who is responsible for your data

Rodrigo Silva, trading as jerseycbt, is the data controller for this website, registered with the Jersey Office of the Information Commissioner (registration number 63174). You can reach me at hello@jerseycbt.com, or at House 3, 8 Lewis Street, St Helier, Jersey JE2 3PB. My practice is based in Jersey and operates under the Data Protection (Jersey) Law 2018; where I work with clients in the UK or EU, UK GDPR and the EU GDPR may also apply.

This notice covers the website and initial enquiries. If you go on to become a client, you'll receive a separate, fuller privacy notice covering your clinical records.

What I collect, and why

• The enquiry or appointment-request form — your name, email address, optional phone number, preferred session format, your message and, for an appointment request, your preferred days and times. I use these details to reply and arrange an appointment. Formspree processes the submission, stores a copy in the form archive and sends an email notification to my practice inbox. Please avoid sending detailed medical information in an initial enquiry.
• Booking a screening call — Calendly processes the booking details you provide, including your name, email address, chosen time and the phone number I should call you on. The booking is added to my connected Google Calendar, and confirmation and cancellation messages are sent by email.
• Email or phone — I keep your message and contact details to respond and, if relevant, to arrange care.
• Analytics — I use Plausible, a privacy-focused tool that is cookieless and collects only aggregated, anonymous figures (page views, country-level location). It does not identify you or track you across sites.
• The map — the contact page embeds a map from OpenStreetMap; when it loads, your browser contacts OpenStreetMap, which may process your IP address.

Lawful basis

For replying to enquiries and arranging appointments, the basis is taking steps at your request before entering into a contract, together with my legitimate interest in running the practice. Analytics rely on legitimate interest in understanding how the site is used.

Who else is involved

This site relies on a small number of third parties, each with their own privacy terms:

• Formspree — processes and stores enquiry and appointment-request submissions, filters them for spam and sends email notifications. Formspree privacy policy.
• Calendly — handles free screening-call bookings and related confirmation and cancellation messages. Calendly privacy notice.
• Google — provides the email inbox that receives website enquiry notifications and the calendar connected to Calendly. Google privacy policy.
• Plausible Analytics — cookieless, anonymous usage statistics.
• OpenStreetMap — serves the map on the contact page.
• GitHub Pages — hosts the website.

I don't sell your data, and I don't share it for marketing.

Cookies

This website sets no tracking or advertising cookies of its own, and the analytics are cookieless. Embedded services (Calendly, the map) may set their own cookies if you interact with them, under their own terms.

How long I keep it

Form submissions, email notifications and screening-call records are held in separate services. Formspree currently provides 30 days of submission history on the plan I use. This does not mean that related emails, calendar entries or every copy held by a provider are automatically deleted after 30 days. The providers' privacy notices explain their own retention practices.

For a screening call that does not lead to therapy, I keep the related enquiry emails in my practice inbox and the screening-call entry in my calendar for seven years from the date of the call.

For an enquiry that does not lead to a screening call or therapy, I keep the related enquiry emails in my practice inbox for seven years from the date of the enquiry.

If you become a client, the separate client privacy notice explains how clinical records are handled and retained.

Your rights

Under the Data Protection (Jersey) Law 2018 — and UK or EU GDPR where they apply — you can ask to access, correct, delete, restrict, or object to the processing of your data, and to receive a copy of it. To exercise any of these, email hello@jerseycbt.com.

Complaints

If you have a concern I can't resolve, you can complain to the Jersey Office of the Information Commissioner (jerseyoic.org). If you are in the UK, you may instead contact the Information Commissioner's Office (ico.org.uk).