Privacy Notice | Debra Raye

PRIVACY NOTICE

Your personal data and other information that you provide to us are subject to our privacy policy, which is described below.

This Practice will manage your personal data with great concern for privacy and confidentiality in accordance with current professional and legal standards. Although the security of your personal data has continuously been addressed by reference to the British Psychological Society’s (BPS) Code of Conduct and the Health & Care Professionals Council (HCPC) Standards of Conduct, Performance and Ethics, the way this Practice handles personal data has been strengthened and made more transparent by the provisions of the General Data Protection Regulation (GDPR) requirements.

Legal basis upon which we process your personal data

The GDPR requires us to identify the legal basis upon which we process your personal data and we shall therefore process data on the basis of:

a) Our contract with you

We need to process your personal data to fulfil our contractual obligations to undertake a psychological assessment or provide psychological services, which you have agreed for us to do. We will process all personal data that you share with us for the purpose of the assessment and other intervention agreed upon. Our processing of your personal data is, therefore, necessary if we are to fulfil our contract with you.

b) Our ‘legitimate interest’ to hold and process your personal data

As you will reasonably expect, given the context and nature of our relationship, the purpose for processing your personal data is to conduct a psychological assessment or provide psychological services as discussed and agreed with you. Educational psychology assessments may involve psychometric profiling and will inevitably involve the processing of special category data, including information about health, educational achievements, cognitive functioning, personality, interests and family history. Depending upon the nature of the contract with you, we have a legitimate interest to collect such personal data for the purpose of forming a professional opinion and/or giving further advice. In doing so, we will only collect information that is relevant to the purpose of the work contracted, such as undertaking an assessment and the associated feedback, reporting, profiling and advising.

How your data will be stored

We take our responsibility for protecting and holding your personal data very seriously and will continue to do so in accordance with our professional codes of conduct and the GDPR regulations.

During the process of the assessment/consultation/intervention, we may hold your personal data in the form of paper notes, drawings and digital files. All this information will be pseudonymised and stored securely. Once the contracted work has been completed, we will delete or destroy all of these except that in the case of an assessment, we will retain test scores and a report in digital form indefinitely. It is in our legitimate interests to do the latter, for example, if someone has mislaid their report, arising from an assessment ten years ago, but who now needs a copy to support their request for reasonable adjustments in the workplace under the terms of the Equality Act, 2010; or for mature students who may require Disability Student Allowance (DSA). We might also want to hold your personal data to support our decision making if ever that is questioned or there is a follow-up assessment in the future.

Protecting your personal data

We regularly review and continually improve our data security measures to reduce any risk of data loss or data breaches. This includes, but is not limited to, encryption of sensitive personal data; storage of digital data in a secure cloud server; password protected pdf documents; regular backups of our data; storing paper files in a locked cabinet.

Sharing your personal data with third parties

We treat the security and method of processing your personal data very seriously. We may disclose your personal data to selected third parties in the following situations:

with your express permission we may disclose your personal data to relevant school staff, local authority staff or other professionals
if we are under a duty to disclose or share your personal data to comply with any legal obligation or protect the rights or safety of our clients or others; this includes exchanging information with Social Services in relation to safeguarding children
we may provide other organisations with your personal data to perform financial functions on our behalf for the processing of payments by bank transfer or credit card; they are provided with only that personal data necessary to perform the task and may not use it for any other purpose; we do not keep credit card information.

Further information regarding using our website

The material on our site is given for general information only and does not constitute professional advice. You should take specific advice before taking a course of action as we do not accept directly or indirectly any responsibility for loss arising directly or indirectly from reliance on information on this site.

This site may include links to other sites which we consider may be of interest to you. We cannot be liable for their content. Users link to other sites at their own risk and use such sites according to the terms and conditions of use of such sites. Given that the Internet uses an open system we cannot warrant that the site and downloads reach you virus-free. You must, therefore, take all appropriate precautions for your own safety.

Your rights

Information about your rights and the GDPR can be found on https://ico.org.uk

Should you have any queries about what information we collect and hold about you, please email Debra Raye, the data controller of your personal data, at psychology@radiate-success.com