Data Rights & Complaints

Version: v1.0-temp · Last updated: 13 July 2026 · Effective: from the date this version is published at cbtflow.com/legal/data-complaints

This page explains how to raise a privacy request or complaint about CBT Flow (operated by Digita1 OÜ, registry code 17003669, Sepapaja tn 6, 15551 Tallinn, Estonia, trading as CBT Flow).

Privacy requests

You can ask about, access, correct, export, restrict or delete personal data. Email privacy@cbtflow.com from the address linked to your account where possible; we will verify your identity before acting.

If your request concerns therapy records held by your therapist's practice, the practice controls those records — we will route your request to the practice and tell you we have done so.

Complaints

Email privacy@cbtflow.com (privacy) or legal@cbtflow.com (anything else). We acknowledge complaints within 30 days, keep you updated while we investigate, and tell you the outcome. Security concerns: security@cbtflow.com. General support: support@cbtflow.com.

Our internal Privacy Lead is Paulius Alionis.

If you are not satisfied

You may complain to the UK Information Commissioner's Office (ICO): ico.org.uk, or 0303 123 1113. You may also contact the Estonian Data Protection Inspectorate (Andmekaitse Inspektsioon): aki.ee.