Privacy Policy

CBT for ADHD Privacy policy October 2022

Who are we?

CBT for ADHD is a provider of therapy services in the UK. We offer neurodivergence affirming therapy. ADWe are registered as a data controller with the Information Commissioners Office. Our registration number is C1199429.

Our Data Protection Officer’s contact details are:

Natasha Hickmott

CBT for ADHD

Linden Lodge Crouch Lane

Selling

Faversham
Kent

ME13 9HW

Tel: 01227 751827

admin@cbtforadhd.com

Personal data and special categories of personal data

Personal data is defined by the General Data Protection Regulation (Regulation 2016/679) as ‘any information relating to an identifiable person who can be directly or indirectly identified in particular by reference to an identifier’. Personal data is, in simpler terms, any information about you that enables you to be identified.

In order for us to provide you with a service we need to collect personal data including health information which is a special category of personal data. We are committed to ensuring that the information we collect, and use, is appropriate for this purpose and does not constitute an invasion of your privacy. We will process (collect, store and use) the information you provide in a manner compatible with the UK’s General Data Protection Regulation (GDPR).

We will endeavour to keep your information accurate and up to date, and not keep it for longer than is necessary.

What personal data do we collect?

Personal and sensitive information we will collect from you will include:

Reasons for referral and information supplied by your GP, medical advisor, NHS referrer or other referrer. This will include your name, date of birth, address, contact telephone numbers, email address and certain health information.
The information supplied by you at first contact and in your assessment session; with additional information from professionals where applicable.
Clinical assessments and plans relating to your treatment.
Summaries of the content of therapy sessions.
Copies of any letters or emails sent to you or received from you.
Details of any contacts you have with us, such as sessions, Zoom or other video, or telephone conversations.

We collect this personal information in order to provide treatment services to you (including communicating with you, your GP, your NHS referrer, other medical advisors as appropriate).

Why do we collect information about you?

At CBT for ADHD, we collect and process personal data in order to provide you with the best and most appropriate care. This is essential in helping us to:

Confirm who you are and when we can contact you.
Make decisions about your ongoing care and treatment.
Ensure that we have accurate and up to date information in order to assess your needs and improve your care.
Allow us to investigate complaints, claims and incidents.

Initial contact

Data will be collected that is required to respond to your initial enquiry. This will include the data on the contact information form, which will be used to contact clients when appropriate. Names, telephone number and email address will be saved as a contact in my electronic devices.

Other professionals or organisations may provide me with referral information and documentation. This includes, but is not limited to, Insurance companies, Employee Assistance Programmes, and GPs.

Treatment

When you access therapy with CBT for ADHD your information is entered and stored on our practice management system called SPLOSE. SPLOSE uses Amazon Web Services which is a recognised online storage solution and has ISO27001:2013 (International Standards Organisation) certification.

The law

The legal basis for the processing of your personal and special category data is covered under the provisions of Article 6 and 9 of the General Data Protection Regulation.

Who do we share your information with?

CBT for ADHD has a data protection policy which means that relevant information is only shared with people involved in your health care. This will include:

Practitioners engaged by us to carry out our services to you
Your GP
Your local NHS service if this is appropriate
CBT for ADHD audits, including the management of untoward or adverse incidents, person satisfaction, including measurement of outcomes.

We will only consider sharing your personal information with other organisations or professionals where we consider that it is an important part of delivering effective care. We do share your information with consent; however, we can also share your information when there is another legal basis to do so. This includes sharing information for the prevention of harm to yourself or others, child protection, the prevention, investigation and detection of a serious crime, including terrorism, or a Court Order. In these circumstances, CBT for ADHD will always do its best to notify you of the sharing of information and only share the minimum information required for the purpose.

Clinicians discuss their work with clinical supervisors who are also bound by strict codes of confidentiality. Regular clinical supervision is required by professional bodies to maintain accreditation and it is for the benefit of clients and therapists. Where there is agreement to audio or video record sessions, please note that excerpts of these may be used to discuss your case in supervision.

It is important that you do not audio or video record the sessions without permission. CBT for ADHD clinicians will not audio or video record any sessions without prior consent from you, following discussion and mutual agreement.

We only share information with your family, friends or advocates with your explicit consent. You have the right to refuse/withdraw your consent to this sharing at any time.

Some of our services work with partner organisations who we share information with. For details of which partners we work with, within specific teams, please contact your service.

Service evaluation

We are always looking to demonstrate which interventions positively impact our patients. Consequently, we actively participate in service evaluation work.

When conducting evaluations, we gather information about the impact of the interventions we deliver. In some instances, we will use data to support external research and evaluation. In all instances, any data used in research and evaluation is completely anonymised before it is shared or published outside of the organisation.

How long we keep your information

We will only retain your personal data for as long as necessary to fulfil the purposes we collected it for, including for the purposes of satisfying any legal, accounting, or reporting requirements.

If you have signed up to receive our newsletter then we will retain your information required for these purposes whilst your subscriptions is active. You may unsubscribe at any time by using the link at the bottom of subscriber emails or by contacting admin@cbtforadhd.com. Your data will not be shared with any third parties.

By law we have to keep basic information about our customers (including Contact, Identity, Financial and Transaction Data) for seven years after the end of therapy to comply with our insurer’s conditions.

Once the retention period expires, Personal Data shall be deleted. Should you wish your records to be kept for longer than seven years please contact us to discuss this.

Your rights as a data subject

At any point while we are in possession of or processing your personal information, you have the following rights:

Right of access – you have the right to request a copy of the information that we hold about you. You will need to provide a form of ID to access this.
Right of rectification – you have a right to correct data that we hold about you that is inaccurate or incomplete.
Right to erasure – in certain circumstances you can ask for the data we hold about you to be erased from our records; however, there are exceptions to the right to erasure and CBT for ADHD are legally required to maintain your records in accordance with the retention guide referenced in the link above.
Right to restriction of processing – where certain conditions apply to have a right to restrict the processing.
Right of portability – you have the right to have the data we hold about you transferred to another organisation.
Right to object – you have the right to object to certain types of processing such as direct marketing.
Right to object to automated processing, including profiling – you also have the right to be subject to the legal effects of automated processing or profiling.

You can find out more about your rights under the UK’s data protection laws at www.ico.org.uk

Complaints

In the event that you wish to make a complaint about how your personal information is being processed by CBT for ADHD (or third parties as described), you can contact the Data Protection Officer (Natasha Hickmott) using the contact details above.

If you are not satisfied with how your complaint has been, or is being, handled, you have the right to lodge a complaint directly with the Information Commissioners Office who is the identified supervisory body:

Information Commissioner’s Office
Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF

Tel: 0330 8303 0338

www.ico.org.uk

Changes to this privacy notice

We may change this Privacy Notice from time to time. This may be necessary, for example, if the law changes, or if we change our business in a way that affects personal data protection.

Any changes will be made available on our website www.cbtforadhd.com

How to contact us

To contact us about anything to do with your personal data and data protection, including to make a request for access to your records (subject access request), please contact our Data Protection Officer: