ADHD Allies Privacy Policy
INTRODUCTION
Your privacy is very important to ADHD Allies and you can be confident that your personal information will be kept safe and secure and will only be used for the purpose it was given. ADHD Allies adhere to current data protection legislation, including the General Data Protection Regulation (EU/2016/679) (the GDPR), the Data Protection Act 2018 and the Privacy and Electronic Communications (EC Directive) Regulations 2003.
This privacy notice tells you what ADHD Allies will do with your personal information from initial point of contact through to after your therapy has ended, including:
• Why ADHD Allies is able to process your information and what purpose ADHD Allies is processing it for
• Whether you have to provide it to ADHD Allies
• How long ADHD Allies store it for
• Whether there are other recipients of your personal information
• Whether ADHD Allies intend to transfer it to another country,
• Whether ADHD Allies do automated decision-making or profiling, and
• Your data protection rights.
‘Data controller’ is the term used to describe the person/organisation that collects and stores and has responsibility for people’s personal data. In this instance, the data controller is ADHD Allies collectively, all of whom are registered with the Information Commissioner’s Office. You can search individual practitioners on the ICO website.
ADHD Allies LAWFUL BASIS FOR HOLDING AND USING YOUR PERSONAL INFORMATION
The GDPR states that ADHD Allies must have a lawful basis for processing your personal data. There are different lawful bases depending on the stage at which your data is processed, as described below:
If you have had therapy with an ADHD Allies therapist and it has now ended, your therapist will use legitimate interest as the lawful basis for holding and using your personal information.
If you are currently having therapy or if you are in contact with an individual therapist to consider therapy, they will process your personal data where it is necessary for the performance of their individual contract.
The GDPR also makes sure that ADHD Allies look after any sensitive personal information that you may disclose appropriately. This type of information is called ‘special category personal information’. The lawful basis for ADHD Allies processing any special categories of personal information is consent initially. ADHD Allies will then retain any counselling records in case of the need to reference them in the future (the official legal basis is to defend against potential legal claims).
HOW ADHD Allies USE YOUR INFORMATION
When you contact individual ADHD Allies practitioners with an enquiry about my counselling services they will collect information to help them satisfy your enquiry. This will include your name, contact details and any information you share about why you are seeking counselling. Alternatively, your GP or other health professional may send your details when making a referral or a parent or trusted individual may give your details when making an enquiry on your behalf.
If you decide not to proceed ADHD Allies therapists will ensure all your personal data is deleted within six months. If you would like your therapist to delete this information sooner, just let them know.
Check with your individual therapist for their personal privacy policy which will outline how they keep personal information during and after your work together.
THIRD PARTY RECIPIENTS OF PERSONAL DATA
The ADHD Allies website will sometimes share personal data with third parties, for example, where ADHD Allies has contracted with a supplier to carry out specific tasks, ensuring that they do not use your information in any way other than the task for which they have been contracted.
The third parties ADHD Allies have identified as processing personal data on our behalf include:
Squarespace - Website host (cookies)
ICO - Public body (data protection regulation)
If/when ADHD Allies share any personal data with any of the above processors, we confirm that we have a fully compliant contract with them.
YOUR RIGHTS
You have a right to ask your individual therapist to delete your personal information, to limit how they use your personal information, or to stop processing your personal information. You also have a right to ask for a copy of any information that your therapist holds about you and to object to the use of your personal data in some circumstances. You can read more about your rights at ico.org.uk/your-data-matters.
If you want to make a formal complaint about the way ADHD Allies have processed your personal information you can contact the ICO which is the statutory body that oversees data protection law in the UK. For more information go to ico.org.uk/make-a-complaint.
DATA SECURITY
ADHD Allies take the security of the data we hold about you very seriously and as such we take every effort to make sure it is kept secure.
ADDITIONAL INFORMATION FOR VISITORS TO THE ADHD Allies WEBSITE
When someone visits the ADHD Allies website, a third party service (Squarespace) collects standard internet log information and details of visitor behaviour patterns. This tracks data like the number of visitors to the various parts of the site. This information is only processed in a way that does not identify anyone. ADHD Allies do not make, and do not allow Squarespace to make, any attempt to find out the identities of those visiting the website.
ADHD Allies use legitimate interests as the lawful basis for holding and using your personal information in this way when you visit the website.
ADHD Allies use Squarespace as the content management system for the website - find out about Squarespace and data protection here and the Squarespace use of cookies policy here.
No user-specific data is collected by ADHD Allies or any third party.