This data privacy policy explains how we will use your personal data. 

How do we collect information about you?

We collect your data in different ways that may include, but are not limited to:

• When you write to us about any subject by any means;
• When you enquire about our services but do not engage;
• When you attend an appointment;
• When you complete our questionnaires.
• When you access or engage with our website.

We collect your personal data in order to deliver our services. The data collected are most likely in electronic format but can also be in paper form

For your security, we use all appropriate organisational and technical security controls to safeguard your data.

Who do we share patient information with?

We share your data amongst the professionals that can potentially offer help for your condition and situation. These could be, for example, insurers, solicitors, neuroradiographers, other neurologists and neuropsychologists etc. This is to ensure that in the case of your clinician not being available that another appropriate clinician can continue your care. Moreover, we could seek a second opinion or clinical supervision where we think this is necessary in order to deliver the best service for your condition. The type of information that we could share includes, but is not restricted to, appointment scheduling, the sharing of clinical notes and reports detailing the information collected, and details of the patient’s progress in treatment.

Information that the patient does not wish to be shared should be communicated to the company/the psychologist and we will ensure that this data is not shared, unless it is considered that withholding this information could result in harm to the patient or to others.

It is important to understand that patient’s data will never be provided to third parties not already involved in the patient’s treatment without obtaining consent. If access to the data is requested or required by others not already involved in the patient’s care, we will request that specific consent forms relating to this data sharing are provided.  Patient details will never be used for marketing processes. Personal data used for audit or research purposes will be anonymised or pseudo anonymised to prevent patients from being identified.

We may disclose your information to comply with a legal requirement or as ordered to do so by a Court or Tribunal. We will take reasonable efforts to communicate with you prior to doing so unless we are legally restricted from doing so.

How do we store your data and for how long do we keep your data for?

Your data are stored electronically and in paper form. When stored electronically, your data are password protected. Data stored in paper form do not have your name on it) i.e. are anonymised), and kept in protected lockers.

If we provide any for services to you, we are required under UK tax law to keep your basic personal data (name, address, contact details) for at least 6 years. After this period, your data will be destroyed and deleted from our database.

We are committed to your data protection rights.

Your rights are detailed in the GDPR and the Data Protection Act 2018.

Right to Object

You have the right to object to our processing or use of your personal information. In some cases, we are bound by law to process your data. If you have given consent for us to collect and process your personal data, you have the right to withdraw that consent at any time. If you withdraw your consent, we will not be able to continue providing our service to you.

Right to a copy of your information and a chance to correct inaccuracies.

You have the right to request a copy of any information about you that we may hold at any time to check whether it is accurate. To ask for that information, please get in touch with us. To protect the confidentiality of your information and the interests we will ask you to verify your identity before proceeding with any request for information. If you have authorised a third party to submit a request on your behalf, we will ask them to prove they have your permission to request such information.

Right to be Forgotten

You have the right to ask us to forget you from our records. We will uphold this right unless there is a legal obligation such as a contractual agreement or it is in our legitimate interest to keep your data.

Right to be informed

You have a right to be informed, to know what we are doing with your data and why.

Right to Restriction

You have the right to ask us to stop processing your data at any time.

How to complain about our processing of your data

If you feel that your data has been handled incorrectly, or you are unhappy with the way we have dealt with your query regarding the way we use your personal data, you have the right to complain to the Information Commissioner’s Office (ICO) which regulates the use of information in the UK.

You can call them on 0303 123 1113 or go online to www.ico.org.uk/concerns 

If you are based outside the UK, you have the right to complain to the relevant data protection supervisory authority in your country.

If you would like to discuss any aspect of this policy or the way we process your information, please contact us.

email: admin@cityneuropsychology.com