Registering interest: how we use your details

Who we are

Theravilo is run by AllCampus UK Limited (company number 11659728, registered in England and Wales), Unit 7, Landmere Lane, Edwalton, Nottingham, England, NG12 4DG. AllCampus UK Limited is the data controller for the details you give in this form. Write to [email protected] about anything in this notice.

What we collect

• Your first name and email address.
• What you work as, and, if you answer it, what takes most of your admin time.
• Whether you asked for updates by email, when, and when you confirmed it through the link we email you.
• The date you registered or last updated your details.

Please do not tell us anything about your clients. We do not want it.

How we use it, and on what basis

• To acknowledge your registration and reply to you about Theravilo, for example to invite you to a short call about how you run your practice. You asked to hear from us, and finding out whether Theravilo is useful to therapists is our legitimate interest. You can tell us to stop at any time.
• To send product updates by email, only if you tick the box and then confirm your address through the link in our email. This is based on your consent, which you can withdraw at any time through the unsubscribe link in every update or by writing to [email protected].
• To keep the form safe from spam, abuse and unauthorised access, which is our legitimate interest. See "Protecting the form" below.

We send you one acknowledgement when you register. We send product updates only if you separately opt in and confirm your email address.

Protecting the form

Cloudflare Turnstile checks that a person, not a program, is filling in the form; to do so it looks at your IP address and information about your browser. Cloudflare does this for us, and also uses the signals, as a separate controller, to improve its detection of bots: see the Turnstile privacy notice. To limit repeated attempts, our own system keeps a scrambled, one-way version of your IP address for up to a day; it is pseudonymised, not anonymous, and we do not keep the address itself. Our providers may keep IP addresses in their own technical logs for limited periods.

Who handles it

Only the people at AllCampus UK Limited who need to see entries can see them. These providers process them for us, under contract:

• Cloudflare: hosting this website, the bot check, and the database that holds the entries, which is set up to keep them in the European Union.
• Resend: delivering our acknowledgement to you and a notification of your entry to our own inbox, and, if you confirm updates, holding our updates list (your first name and email) and sending the updates.
• Proton: our email inbox.

Some of these providers are based in, or use services in, countries outside the UK, such as the United States. Where your details are transferred outside the UK, the transfer relies on UK adequacy regulations or on contractual safeguards approved under UK law, such as the International Data Transfer Addendum. Ask us for details of the safeguard for a provider. We do not sell your details or share them for anyone else's marketing.

How long we keep it

We delete your entry 12 months after you registered or last updated it. The deletion runs automatically, and we check every month that it has run; we delete our copies of the notification emails in our inbox on the same timetable. If you confirmed updates, we keep your entry, as the record of your consent, and you stay on the updates list until you unsubscribe or ask us to remove you. Our providers keep delivery and security logs for limited periods under their own policies. Ask us and we will delete your details sooner.

Your rights

You can ask for a copy of your details, ask us to correct or delete them, ask us to restrict how we use them, object to how we use them, withdraw your consent to updates, and, where we rely on your consent, ask for your details in a portable format. Write to [email protected]. We normally reply within one month; if we need longer, as the law allows for some requests, we will tell you why.

If you are unhappy with how we handled your details, please tell us first. You can also complain to the UK's data protection regulator, the Information Commission (formerly the ICO): make a complaint.

Changes

This notice covers only the Register interest form; the product will have its own privacy notice. If we change this notice, the version date above changes, and entries record which version was in place when they were made.