CBRT™ Applicant Privacy Notice
Effective date: 20 August 2026
1. About this notice
This Privacy Notice explains how CBRT™ Healthcare Innovation Systems Ltd collects, uses, stores and protects personal information submitted through the CBRT™ Practitioner Training Programme/Program application process.
It applies to applicants in the United Kingdom and the United States.
2. Who is responsible for your information?
CBRT™ Healthcare Innovation Systems Ltd is responsible for the personal information collected through this application process.
For privacy enquiries or requests, please contact:
Email: nationalhealth@colourbreathing.com
Authorised personnel within CBRT USA may have access to US applications where necessary to administer applications, assess suitability and arrange training.
3. Information we collect
We may collect:
- Your name, contact details, residential address, country and US state of residence
- Your employment, self-employment, voluntary-work and professional history
- Your education, qualifications, training and professional registrations
- Information about relevant professional restrictions, suspensions or sanctions
- Information about safeguarding or equivalent training
- Your personal statement and reasons for applying
- Information about the settings, individuals and communities you hope to support
- Information about your ability to attend and complete the CBRT™ Practitioner Training Programme/Program, assessment and case-study requirements
- Information concerning professional insurance and your willingness to meet CBRT™ licensing, audit, conduct and continuing professional-development requirements
- A CV or résumé where you choose to upload one
- Information about reasonable adjustments or accessibility support that you request
- National equality and applicant-monitoring information, including ethnicity, race, gender, disability, age group and military or veteran status
- Your electronic signature and declaration date
We do not request criminal-record details at the formal application stage.
4. How we use your information
We use applicant information to:
- Confirm eligibility for CBRT™ Practitioner Training
- Review and assess applications against the published selection criteria
- Evaluate relevant qualifications, experience, professional standing and suitability
- Communicate with applicants and respond to questions
- Arrange interviews, discussions, training and assessments
- Provide reasonable adjustments and accessibility support
- Monitor whether the application process is fair and accessible
- Protect the quality, safety and integrity of CBRT™ Practitioner Training and future service delivery
- Maintain appropriate application, selection and governance records
- Meet applicable legal, regulatory, safeguarding and contractual requirements
- Establish, exercise or defend legal claims where necessary
We do not sell applicant information or use it for unrelated advertising or marketing.
5. UK lawful bases
For applicants covered by UK data-protection law, we normally process personal information because:
- It is necessary to take steps at your request before entering into a training or licensing agreement
- It is within our legitimate interests to administer applications, assess suitability, maintain professional standards and protect applicants, participants and the CBRT™ Programme
- Processing may be necessary to meet applicable legal or regulatory obligations
- You have provided consent where information is genuinely optional, including consideration for future training opportunities
Where you voluntarily provide information concerning ethnicity, race, disability, health or another category of sensitive information, we will process it only for the stated accessibility or equality-monitoring purpose and under an appropriate condition permitted by law.
Where explicit consent is relied upon, you may withdraw it at any time without affecting the lawfulness of processing already undertaken or the assessment of the remainder of your application.
6. Optional information
Equality-monitoring information is voluntary. It will not be used to decide whether you should receive a training place.
Where practicable, monitoring information will be separated from the information used to assess your application and will be reviewed only in an aggregated or non-identifying form.
Information about reasonable adjustments will be shared only with personnel who need it to provide appropriate support.
7. Who may receive your information?
Applicant information may be shared, where necessary, with:
- Authorised CBRT™ Healthcare Innovation Systems Ltd personnel involved in administration, assessment, governance or training
- Authorised CBRT USA personnel involved in US applications and training
- Authorised National or Regional Training personnel involved in applicant selection or training arrangements
- Data Capture Labs, where necessary to provide authorised technical, data-management or infrastructure support
- Google Workspace and Google Forms, which are used to receive and store application information
- Professional advisers, auditors, insurers, regulators or public authorities where necessary
- Law-enforcement or safeguarding authorities where disclosure is required or permitted by law
Service providers are expected to process personal information only for authorised purposes and to apply appropriate confidentiality and security measures.
8. International transfers
Because CBRT™ operates in the United Kingdom and the United States, applicant information may be accessed or processed outside the applicant's country.
Where UK personal information is transferred to the United States or another country, CBRT™ Healthcare Innovation Systems Ltd will use the safeguards required by UK data-protection law. These may include contractual protections such as the UK International Data Transfer Agreement, the UK Addendum to approved standard contractual clauses, or another legally recognised transfer mechanism.
9. Background screening and references
Applicants who receive conditional acceptance may be asked to complete lawful and role-appropriate identity, criminal-record, safeguarding, professional-registration or reference checks.
These checks will not be initiated through the formal application form.
Before any check is undertaken, the applicant will receive further information about:
- The check being requested
- Why it is required
- The organisation conducting it
- The information that will be collected
- The applicant's applicable rights
- How the result may be used
Where required in the United States, an applicant will receive a separate disclosure and authorisation before a background report is requested from a third-party screening provider.
10. How long we retain information
We normally retain information as follows:
- Incomplete applications: six months from the applicant's last activity
- Unsuccessful applications: 12 months following the application decision
- Applicants who agree to be considered for future training opportunities: up to 24 months
- Successful applications: relevant information will be transferred into the applicant's CBRT™ training and licensing record and retained under the applicable training-record and licensing-retention policy
Optional equality-monitoring information will be anonymised, aggregated or deleted when identifiable information is no longer required.
Information may be retained for longer where necessary to meet a legal, regulatory, insurance, safeguarding or dispute-resolution requirement.
11. Information security
We use reasonable technical and organisational measures to protect applicant information against unauthorised access, disclosure, alteration, loss or misuse.
Access is restricted to authorised personnel and service providers who require the information for an approved purpose.
No internet-based system can be guaranteed to be completely secure. Applicants should not submit passwords, financial information, medical records or criminal-record documentation through the formal application form.
12. Automated decision-making
Training-place decisions are not made solely by automated systems.
Applications are reviewed by authorised people against the applicable CBRT™ selection criteria.
13. Your privacy rights
Depending on your location and the law that applies, you may have the right to:
- Ask whether we hold information about you
- Obtain a copy of your information
- Correct inaccurate or incomplete information
- Request deletion of information
- Request restriction of processing
- Object to particular uses of information
- Receive information in a portable format where applicable
- Withdraw consent where processing is based on consent
- Complain to an appropriate data-protection or regulatory authority
These rights are not absolute and may be subject to lawful exceptions.
UK applicants may complain to the Information Commissioner's Office at www.ico.org.uk.
US applicants may have additional rights under the privacy laws of their state. We will respond to valid privacy requests in accordance with the law that applies.
We will not discriminate against an applicant for making a lawful privacy request.
14. How to exercise your rights
Please email nationalhealth@colourbreathing.com with the subject line:
CBRT™ Applicant Privacy Request
We may need to verify your identity before responding. We will request only the information reasonably necessary to complete that verification.
15. Applicants under 18
Applicants must be aged 18 or over when CBRT™ Practitioner Training begins.
We do not knowingly accept formal applications from children.
16. Changes to this notice
This notice may be updated when the application process, technology, service providers or applicable legal requirements change.
The current version and effective date will be published on the CBRT™ website.