Mon - Sun

0845 463 0571

For Appointment

GDPR Privacy Notice

Adoption Support Agency of Registered Therapists (ASART) General Data Protection Regulation (GDPR) PRIVACY NOTICE As the General Data Protection Regulation (GDPR) came into effect on 25th May 2018, we want to ensure that you are aware about changes to our privacy policy.

We want to assure you that the way we use your personal information has not changed. However, our updated privacy policy will give you a better and thorough understanding of how we use and protect your data. Your data security is important to us.

The Adoption Support Agency of Registered Therapists (ASART) is registered with the Office for Standards in Education, Children’s Services and Skills (OFSTED) in England and Wales, Registration No. SC068698.

You can contact us at ASART’s Registered Office: 60 Marsom Grove, Luton, LU3 4BQ | GDPR Privacy Notice | by email at:

ASART is fully committed to ensuring the protection of your privacy and confidentiality. We undertake to preserve the confidentiality of all information you provide to us, and to provide all visitors to our website with the best possible experience. Should we ask you to provide certain information by which you can be identified when using this website, you can be assured that it will only be used in accordance with this privacy statement.

This online privacy policy is provided by ASART to make sure you are aware of our security practices and to inform you of the way your personal information is gathered, used, and protected so that you will feel secure while visiting our website. By continuing to use this website, you are confirming that you have read this Data Protection Notice and that you are consenting to ASART processing your personal data for the following purposes stated in this policy notice.

What type of information do we collect from you?

When someone visits our website, we use a third party service, Google Analytics, to collect standard internet log information and details of visitors to our website. The information might include IP address and information regarding what pages are accessed. This information is only processed in a way which does not identify anyone. We do not make, and do not allow Google to make any attempt to find out the identities of those visiting our website.

We collect personal information from you and from third parties (anyone legitimately acting for you).

When you give us information about other people, please make sure that they have seen a copy of this privacy notice and are comfortable with you giving us their information.

We collect personal information from you through your contact with us, including by phone, email, through our website, by post, filling in application or other forms or face-to-face (for example during confidential sessions).

We also collect information from other organisations including Charities and Councils.

It may be necessary to collect information from:

  • a parent or guardian, if under 18 years old;
  • a family member, or someone else acting for you;
  • doctors, other clinicians, health-care professionals and social workers.

Two Categories of Personal information

Standard Personal Information we hold may include: your name, username, postal address, email address, phone numbers, country of residence, age, date of birth.

Special (More Sensitive) Category information we hold may include: information about your physical or mental health, genetic information, referrals from social workers, records of medical treatment received, information about your ethnic origin, religion, disability (if any) and any criminal convictions and offences.

Reasons to use personal information

Legally, we must have valid reasons for processing your personal information which depends on what category of personal information we are processing. We normally process standard personal information if this is necessary to provide the services set out in a service contract. We process special, sensitive category information about you only when it is necessary to address necessary safeguarding, medical, insurance, government, or social-care systems. If we need to ask for your permission for further information, we will make it clear what we are asking for and ask you to confirm that it is your choice to grant that permission. If we cannot provide a service without your permission, we will make this clear when we ask for your permission. If you later withdraw your permission, we will no longer be able to provide you with a service that relies on having your permission.

Statutory interests

We process your personal information for justifiable reasons, including looking after all aspects of our relationship with you, helping us improve our services, or dealing with third parties who may fund our services. Also, to ensure all parties’ legal rights are exercised. More Information about our lawful interests is set out below:

Legal authorisation to process your personal information includes:

  • providing counselling services on behalf of a third party (for example, your employer);
  • ensuring sessions are handled appropriately and investigating any complaints;
  • keeping our records up to date as allowed by law;
  • undertaking marketing activities of interest to you only, based on how you prefer us to contact you in connection with market research we are carrying out;
  • to monitor how well we are reaching performance expectations pertaining to health-care providers;
  • upholding laws and regulations that apply to us and the third parties we work with.

Marketing our Services

We may use your personal information to send marketing details of our services by post, by phone, through social media, by email or by text.

Please note, we only use your personal information to send you marketing material if we have your permission or a valid interest as described above.

If you don’t want to get any such information from us, please inform us by contacting us at any time.

Sharing your Information

We may need to share your information in line with the law. For more details about who we must share your information with if legally required, please see below:

For all our customers, we may need to share your information with:

  • doctors, clinicians and other health-care professionals, hospitals and other health-care providers;
  • suppliers who help to deliver necessary confidential services;
  • people or organisations with whom, by law, we must share your personal information (for example, for fraud-prevention or safeguarding purposes, including with the Care Quality Commission);
  • the police and other law-enforcement agencies to help them perform their duties, or by law or under a court order;
  • those providing your treatment and other benefits;

If we must share your personal information, we will make sure appropriate protection is in place to protect your personal information in line with all data-protection laws as well as GDPR regulations.

Transferring your personal information to countries outside the EU

We do not transfer your personal data to any countries outside the EU.

Duration of keeping Personal Data

Your personal information may be kept in confidence depending on:

  • when you were a client or stakeholder with us and the types of services used;
  • time spans reasonable for keeping records to show we meet legal obligations and;
  • duration for keeping information set by law or recommended by regulators, professional bodies, or associations, as well as any relevant situations that may apply.

If you would like more information about how long we will keep your information for, please contact us at:

Your Legal Rights

Please note: You have the full rights to access your information and to ask us to correct any mistakes and to delete and restrict the use of your information. You may object to us using your information, to ask us to transfer information you have provided, to withdraw permission you have given us to use your information and to ask us not to use automated decision-making which will affect you. For more information, see below.

You do have the following rights (certain legal exceptions apply).

  • Right of access: the right to make a written request for details of your personal information and a copy of that personal information.
  • Right to erasure ('right to be forgotten'): the right to have certain personal information about you erased.
  • Right to object: the right to object to processing of your personal information in cases where our processing is based on the performance of a task carried out in the public interest or we have let you know the processing is necessary for our or a third party’s legal interests. You can object to our use of your information for profiling purposes where it is in relation to direct marketing.
  • Right to data portability: The right to ask for the personal information you have made available to us to be transferred to you or a third party in machine-readable formats.
  • Right in relation to automated decisions: You have the right not to be subject to a decision based solely on automated processing which produces legal effects concerning you or similarly significantly affects you, unless it is necessary for entering into a contract with you, it is authorised by law or you have given your explicit consent. We will let you know when such decisions are made, the lawful grounds we rely on and the rights you have.
  • Right to rectification: The right to have inaccurate information about you corrected or removed.
  • Right to restriction of processing: The right to request that your personal information is used only for restricted purposes.
  • Right to withdraw consent: The right to withdraw any consent you have previously given us to handle your personal information. If you withdraw your consent, this will not affect the lawfulness of ASART’s use of your personal information prior to the withdrawal of your consent and we will let you know if we will no longer be able to provide you with your chosen service.

If you make a request, you need to confirm your identity, and to provide information that helps us to understand your request better. If we do not meet your request, we will explain why.

To exercise any of your rights please contact:

Contacts for Data Protection

In connection with any questions, comments, complaints, or suggestions in relation to this Privacy Policy or any other queries about the way in which we process information about you, please contact our Data Protection Officer at: 60 Marsom Grove, Luton, LU3 4BQ or email us at:

Please note, you also have a right to make a complaint to your local privacy supervisory authority - The Information Commissioner for UK:

Information Commissioner's Office (ICO)
Wycliffe House
Water Lane

Tel: 0303 123 1113 (local rate) or 01625 545 745 if you prefer to use a national rate number
Fax: 01625 524 510

GDPR Compliance

Fields marked with * are mandatory.

Tel number: 0845 463 0571