Privacy Notice

Last updated: 20 March 2026

PBS ABA UK respects your privacy and is committed to handling personal data carefully, lawfully, and transparently.

This Privacy Notice explains how PBS ABA UK collects, uses, stores, and shares personal data when you:

  • visit this website
  • contact PBS ABA UK
  • subscribe to emails or lead magnets
  • apply for or purchase a service
  • use the Behaviour Pattern Mapping System™ (“BPMS”)
  • communicate during or after a service

1. Who is responsible for your data

PBS ABA UK is the data controller for the personal data covered by this Privacy Notice.

PBS ABA UK
12 Porson Road
Norwich
NR7 9DH
Email: sim@pbsaba.co.uk

If you have any questions about this Privacy Notice or how your data is handled, please contact sim@pbsaba.co.uk.

2. What personal data I collect

Depending on how you interact with PBS ABA UK, I may collect and use the following categories of personal data:

Identity and contact data

  • names
  • email addresses
  • phone numbers
  • postal address details where relevant

Enquiry and communication data

  • information you provide when you contact me
  • messages sent by email, website form, or other channels
  • records of correspondence

Service and application data

  • information you provide when applying for or purchasing a service
  • intake form responses
  • behaviour tracking information
  • trigger mapping information
  • consultation notes
  • reports and feedback notes

Child and family information

  • information about your child and family circumstances where relevant to the service
  • behavioural information
  • developmental, educational, support, and safeguarding information you choose to provide

Special category data
Some services, including BPMS, may involve special category data, including information about health, disability, mental health, neurodevelopment, or safeguarding concerns.

Payment and transaction data

  • purchase records
  • invoice records
  • payment status
  • limited billing information

Please note that card payment details are processed by Stripe. I do not store full card numbers.

Technical and website usage data

  • IP address
  • browser type
  • device information
  • cookie and analytics data
  • pages visited and website interactions

Marketing data

  • whether you subscribed to emails
  • whether you opened or clicked marketing emails
  • your communication preferences

3. How I collect your personal data

I collect personal data:

  • directly from you, when you fill in forms, contact me, purchase a service, or work with me
  • from your use of the website, through cookies and analytics tools
  • from service materials you submit, such as intake forms, trackers, or reports
  • from payment and email service providers involved in delivering my services
  • in limited cases, from third parties where you ask them to share information with me or where sharing is necessary for safeguarding or legal reasons

4. How I use your personal data

I may use your personal data to:

  • respond to enquiries
  • provide information you request
  • decide whether a service looks like a good fit
  • take steps before entering into a contract with you
  • provide paid services you have purchased
  • review submitted forms and materials
  • schedule and run consultations and feedback sessions
  • create reports and written recommendations
  • manage payments, invoicing, and administration
  • send onboarding or service-related emails
  • send marketing emails where you have consented
  • improve the website and understand how it is used
  • keep records, protect rights, and manage complaints
  • comply with legal, regulatory, safeguarding, or insurance obligations

5. Lawful bases for processing

Under the UK GDPR, I rely on one or more of the following lawful bases, depending on the situation:

Contract
Where processing is necessary to provide a service you have purchased, or to take steps at your request before entering into a contract.

Legitimate interests
Where processing is reasonably necessary for running PBS ABA UK, responding to enquiries, managing services, keeping records, improving the website, or protecting the business and service users, provided those interests are not overridden by your rights and interests.

Consent
Where you have given clear consent, for example to receive marketing emails or, where appropriate, for certain types of sensitive information processing.

Legal obligation
Where processing is necessary to comply with legal or regulatory requirements.

Vital interests / safeguarding
In limited cases, where processing is necessary to protect someone from serious harm or to respond appropriately to safeguarding concerns.

6. Special category data and children’s data

Some of the services offered by PBS ABA UK involve more sensitive information, including information about children and information relating to health, disability, mental health, safeguarding, or similar matters.

Where I process special category data, I do so only where I have both:

  • a valid lawful basis under data protection law; and
  • an additional condition for processing that type of sensitive data.

Depending on the situation, this may include explicit consent and, where relevant, safeguarding or other conditions permitted by law.

Because BPMS and related services may involve children’s information, I aim to collect only the minimum information reasonably needed for the service and to handle it with additional care.

7. Marketing emails and lead magnets

If you sign up for a lead magnet, newsletter, or email updates, I may use your name and email address to send you relevant emails.

I use MailerLite to manage email subscriptions and campaigns.

You can unsubscribe from marketing emails at any time by clicking the unsubscribe link in the email or by contacting sim@pbsaba.co.uk.

I will not send you marketing emails unless I have an appropriate legal basis to do so.

8. Payments

Payments are processed through Stripe.

PBS ABA UK receives information such as your name, email address, payment status, and limited billing information needed to manage the transaction and deliver the service.

I do not receive or store full card details on my own systems.

9. Cookies, analytics, and website tools

This website uses cookies and similar technologies, including tools such as:

  • Google Analytics
  • CookieYes
  • Google Search Console
  • embedded content and media tools such as YouTube or Vimeo

These tools may collect technical and usage information about how visitors use the website.

Some cookies are strictly necessary for the website to work. Others help measure traffic, understand how the site is used, or support embedded content. Where required, non-essential cookies should only be used with your consent.

For more detail, please see the cookie banner and any cookie settings made available on the website.

10. Scheduling, meetings, storage, and service delivery tools

Depending on how services are delivered, PBS ABA UK may use third-party service providers such as:

  • WordPress and website plugins, including contact form tools
  • MailerLite
  • Stripe
  • Google Analytics
  • CookieYes
  • Google Search Console
  • YouTube or Vimeo
  • Calendly
  • Google Drive
  • Dropbox
  • OneDrive
  • Zoom
  • Google Meet

These providers may process personal data on my behalf or as separate controllers, depending on their role.

I use them to operate the website, communicate with you, deliver services, store documents, schedule sessions, host meetings, and manage business administration.

11. Who I share your data with

I do not sell your personal data.

I may share personal data only where necessary with:

  • trusted service providers and processors who help me run PBS ABA UK
  • professional advisers, insurers, or regulators where reasonably necessary
  • payment, storage, scheduling, analytics, and communication providers
  • law enforcement, safeguarding bodies, courts, or other authorities where required by law or where necessary to protect someone from serious harm

As a general rule, I do not share your service information with schools, professionals, or other third parties unless:

  • you ask me to do so;
  • you have given appropriate permission; or
  • I am required or permitted to do so for legal or safeguarding reasons.

12. International transfers

Some of the third-party providers I use may store or process personal data outside the UK.

Where personal data is transferred outside the UK, I aim to ensure that appropriate safeguards are in place. Depending on the provider and the destination, this may include:

  • a UK adequacy decision; or
  • approved contractual protections such as the UK IDTA or the UK Addendum.

You can contact me if you would like more information about the safeguards used for a particular transfer.

13. How long I keep personal data

I keep personal data only for as long as it is reasonably needed for the purpose for which it was collected, or for longer where required for legal, regulatory, safeguarding, insurance, complaint-handling, or legitimate record-keeping reasons.

As a general guide, I aim to keep data for the following periods:

General enquiries and contact form messages
Up to 12 months after the last meaningful contact.

BPMS applications or onboarding that do not proceed
Up to 6 months after the decision not to proceed or the last meaningful contact.

Email marketing and lead magnet subscriber data
Until you unsubscribe, withdraw consent, or after a period of inactivity of up to 24 months, after which I may delete or suppress your details.

Paid service records, including onboarding materials, session notes, reports, and related correspondence
Normally 7 years after the end of the service.

In some cases, I may keep records for longer where reasonably necessary for safeguarding, complaints, insurance, or legal claims, especially where the records mainly relate to a child.

Financial and transaction records
For as long as reasonably necessary to meet accounting, tax, and legal requirements.

Website analytics and cookie-related data
In line with the settings of the relevant tool and only for as long as reasonably necessary.

When personal data is no longer needed, I aim to delete it securely or anonymise it.

14. How I keep your data secure

I take reasonable technical and organisational steps to reduce the risk of loss, misuse, unauthorised access, disclosure, or alteration of personal data.

This includes the use of reputable third-party systems, cloud storage, password protection, and access controls where appropriate.

However, no method of transmission or storage is completely secure, and I cannot guarantee absolute security.

15. Automated decision-making

PBS ABA UK does not use solely automated decision-making or profiling that has legal or similarly significant effects on individuals.

16. Your data protection rights

Depending on the circumstances, you may have rights to:

  • be informed about how your data is used
  • request access to your personal data
  • request correction of inaccurate or incomplete data
  • request deletion of your data
  • request restriction of processing
  • object to certain processing
  • request data portability in some cases
  • withdraw consent where processing is based on consent

These rights are not absolute and may not apply in every situation.

To exercise any of your rights, please contact sim@pbsaba.co.uk.

17. Complaints

If you have any concern about how your personal data is handled, please contact me first at sim@pbsaba.co.uk so I have the opportunity to try to resolve it.

You also have the right to complain to the Information Commissioner’s Office (ICO).

18. Third-party websites and embedded content

This website may contain links to third-party websites or embedded content, including video platforms and scheduling tools.

If you use those services, their own privacy notices and terms may also apply. PBS ABA UK is not responsible for the privacy practices of third-party sites or services.

19. Changes to this Privacy Notice

I may update this Privacy Notice from time to time.

The latest version will always be posted on this website, and the “Last updated” date will show when it was most recently revised.