Privacy Policy
1. Introduction
This Privacy Policy explains how My Psych Ltd collects, uses, stores, and protects your personal information when you use our website or engage with our services. We are committed to protecting your privacy and ensuring that your data is handled securely and in accordance with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, and all applicable data protection legislation.
My Psych Ltd is the Data Controller for the purposes of UK GDPR. Our Data Protection Officer (DPO) can be contacted at dpo@my-psych.co.uk.
2. How We Use Your Information
- We use your information to:
- Deliver safe, high-quality ADHD and Autism assessments and treatment
- Communicate with you about your care
- Share updates or reports with your GP or nominated professionals (with your consent)
- Fulfil legal, regulatory, and safeguarding responsibilities
- Improve our services and audit our clinical practices
- Maintain internal records, including invoices and appointment history
3. What Information We Collect
We may collect the following types of personal information:
- Your name, date of birth, contact details
- Health and medical history relevant to your assessment or treatment
- Correspondence and records of contact with you
- Audio/video recordings (with your consent)
- Emergency contact and GP details
- Payment and invoicing information
When you visit our website, we may also automatically collect technical information, including your IP address, browser type and version, operating system, time zone setting, and information about how you navigate and interact with our website. This information is used to monitor usage, improve performance, and ensure security.
4. Lawful Basis for Processing
Our lawful bases for processing your information are:
- Your explicit consent
- Compliance with legal obligations (e.g. CQC, safeguarding)
- Provision of healthcare under a contract
- Legitimate interests (e.g., internal quality assurance)
We will always seek your explicit consent where required, especially for recordings and data sharing.
5. Sharing Your Information
We may share your information with:
- GPs or medical professionals (only with your consent)
- Schools or local authorities (with your permission)
- Regulatory bodies such as the CQC or safeguarding authorities (where legally required)
- IT providers or third parties who support our systems (under strict data processing agreements)
We do not sell or trade your personal data.
We may also disclose personal data where required to comply with legal obligations, to protect against fraud, or in connection with a business transfer, merger, or sale.
6. Cookies and Analytic's
We use cookies and similar technologies to monitor website usage, analyse performance, and improve user experience. This may include the use of Google Analytic’s or similar tools.
You can manage or disable cookies through your browser settings. For more information, please see our Cookie Policy.
7. Data Retention
We retain personal information only for as long as necessary:
- Health records: in line with the Records Management Code of Practice
- Financial records: typically for 6 years
- Consultation recordings: stored securely and deleted when no longer necessary for the purpose collected
When data is no longer required, we will delete or anonymise it securely.
8. Your Rights
Under the UK GDPR, you have the right to:
- Access the personal information we hold about you
- Request correction of inaccurate data
- Request erasure (where applicable)
- Object to processing or request restriction
- Withdraw consent at any time
- Lodge a complaint with the Information Commissioner’s Office (ICO)
9. Automated Decision-Making
We do not carry out any automated decision-making or profiling that produces legal or similarly significant effects for individuals.
10. Security of Your Data
We implement appropriate technical and organizational measures to protect your data, including secure cloud-based systems, encryption, access controls, staff training, and regular audits.
While we take all reasonable steps to protect your information, data transmission over the internet cannot be guaranteed to be completely secure.
11. Third-Party Websites
Our website may contain links to third-party websites. We are not responsible for the content or privacy practices of those websites, and we encourage you to review their privacy policies before providing any personal data.
12. International Data Transfers
All personal data is stored within the UK or the European Economic Area (EEA). Where any data is transferred outside these areas, appropriate safeguards will be implemented in accordance with UK GDPR.
13. Contact Us
For any questions about this policy or to exercise your rights, contact us at:
- Email: dpo@my-psych.co.uk
- Phone: 0333 344 3363
- Address: 4 Kestrel Court, Burnley, BB11 5NA
