Privacy policy
Your personal data and other information that you provide to us are subject to our privacy policy, which is described below.
Special Category Data Provision 9.2 Health & Social Care
Privacy Policy
This Practice will manage your psychological records with great concern for privacy & confidentiality in accordance with current professional and legal standards. Although the security of your personal data has continuously been addressed by reference to the British Psychological Society’s (BPS) Code of Conduct and the Health & Care Professionals Council (HCPC) Standards of Conduct, Performance and Ethics, the way this Practice handles personal data has been strengthened and made more transparent by the provisions of the General Data Protection Regulation (GDPR).
The GDPR requires us to identify the legal basis upon which we process your personal data and we, shall, therefore, process data on the basis of:
Contract
We need to process your personal data to fulfil our contractual obligations to undertake the psychological work that needs to be done and requested by the client. We will process all personal data that you share with us for the purpose of your assessment and other intervention agreed upon. Our processing of your personal data is, therefore, necessary if we are to fulfil our contract with you.
Legitimate Interest
As you will reasonably expect, given the context and nature of our relationship, the reason for holding your data is to conduct a psychological assessment, which may include psychometric profiling or provide psychological services as discussed with you. Inevitably, this will involve the processing of special category data, including information; e.g. about your health, educational achievements, cognitive functioning, personality, interests and family history. Depending upon the nature of the contract with you, we need the data for the purpose of forming a professional opinion and/or giving further advice. In so doing, we will only collect information from you necessary for undertaking that assessment and the associated and expected reporting, profiling and advising.
We should emphasise that we take our responsibility for protecting and holding your personal data very seriously and will continue to do so in accordance with our professional codes of conduct and the GDPR regulations. After the assessment, we will retain your information in two forms for the following time periods:
Non-EHCP cases – 2 years from the date when the final report is sent or from the last date you have communicated with us.
EHCP cases – until the child/young person is 25 years old from the date when the final report is sent.
If you do not know the category of your case, it will be set out in your contract. However, we will only hold information that is necessary and unique to us. If we have received reports; e.g. from other sources, in preparation for the case, we will not retain them once the final report is issued and sent, as the owner of the report will have their own copy. With EHCP cases, all court papers will be destroyed together with any other reports not needed – using our confidential data shredding company which then issues a Certificate of Destruction to us.
Information is kept in two formats:
We will not retain any unnecessary information, which may include raw test data (at the discretion of the Educational Psychologist) beyond the retention period even when e-copies of test reports are kept indefinitely. Hard files and e-copies are securely stored.
Further Information
When you make contact with us using our website, you may provide certain information about yourself. The information you provide will be kept confidential and will not be forwarded to any third party service provider.
This site may include links to other sites which we consider may be of interest to you. We cannot be liable for their content. Users link to other sites at their own risk and use such sites according to the terms and conditions of use of such sites.
Disclaimer
The material on our site is given for general information only and does not constitute professional advice. You should take specific advice before taking a course of action as we do not accept directly or indirectly any responsibility for loss arising directly or indirectly from reliance on information on this site.
Given that the Internet uses an open system we cannot warrant that the site and downloads reach you virus-free. You must, therefore, take all appropriate precautions for your own safety.
Information about your rights and the GDPR can be found on our website – https://ico.org.uk/
Privacy Policy
This Practice will manage your psychological records with great concern for privacy & confidentiality in accordance with current professional and legal standards. Although the security of your personal data has continuously been addressed by reference to the British Psychological Society’s (BPS) Code of Conduct and the Health & Care Professionals Council (HCPC) Standards of Conduct, Performance and Ethics, the way this Practice handles personal data has been strengthened and made more transparent by the provisions of the General Data Protection Regulation (GDPR).
The GDPR requires us to identify the legal basis upon which we process your personal data and we, shall, therefore, process data on the basis of:
- Our contract with you and
- Our ‘legitimate interest’ to hold and process your personal data
Contract
We need to process your personal data to fulfil our contractual obligations to undertake the psychological work that needs to be done and requested by the client. We will process all personal data that you share with us for the purpose of your assessment and other intervention agreed upon. Our processing of your personal data is, therefore, necessary if we are to fulfil our contract with you.
Legitimate Interest
As you will reasonably expect, given the context and nature of our relationship, the reason for holding your data is to conduct a psychological assessment, which may include psychometric profiling or provide psychological services as discussed with you. Inevitably, this will involve the processing of special category data, including information; e.g. about your health, educational achievements, cognitive functioning, personality, interests and family history. Depending upon the nature of the contract with you, we need the data for the purpose of forming a professional opinion and/or giving further advice. In so doing, we will only collect information from you necessary for undertaking that assessment and the associated and expected reporting, profiling and advising.
We should emphasise that we take our responsibility for protecting and holding your personal data very seriously and will continue to do so in accordance with our professional codes of conduct and the GDPR regulations. After the assessment, we will retain your information in two forms for the following time periods:
Non-EHCP cases – 2 years from the date when the final report is sent or from the last date you have communicated with us.
EHCP cases – until the child/young person is 25 years old from the date when the final report is sent.
If you do not know the category of your case, it will be set out in your contract. However, we will only hold information that is necessary and unique to us. If we have received reports; e.g. from other sources, in preparation for the case, we will not retain them once the final report is issued and sent, as the owner of the report will have their own copy. With EHCP cases, all court papers will be destroyed together with any other reports not needed – using our confidential data shredding company which then issues a Certificate of Destruction to us.
Information is kept in two formats:
- Paper Files
- E-Files
We will not retain any unnecessary information, which may include raw test data (at the discretion of the Educational Psychologist) beyond the retention period even when e-copies of test reports are kept indefinitely. Hard files and e-copies are securely stored.
Further Information
When you make contact with us using our website, you may provide certain information about yourself. The information you provide will be kept confidential and will not be forwarded to any third party service provider.
This site may include links to other sites which we consider may be of interest to you. We cannot be liable for their content. Users link to other sites at their own risk and use such sites according to the terms and conditions of use of such sites.
Disclaimer
The material on our site is given for general information only and does not constitute professional advice. You should take specific advice before taking a course of action as we do not accept directly or indirectly any responsibility for loss arising directly or indirectly from reliance on information on this site.
Given that the Internet uses an open system we cannot warrant that the site and downloads reach you virus-free. You must, therefore, take all appropriate precautions for your own safety.
Information about your rights and the GDPR can be found on our website – https://ico.org.uk/