top of page
Logo (1).png

Privacy Notice 

1. Introduction

This Privacy Notice explains how your personal data is collected, used, stored, and protected in accordance with the General Data Protection Regulation (EU) 2016/679 (GDPR) and the Data Protection Act 2018.

This notice applies to all individuals accessing psychological therapy and/or assessment services.

2. Data Controller

The data controller is:

Juandri Buitendag
HCPC Registered Practitioner (Registration Number: PYL35804)
Registered with the Health and Care Professions Council

If you have any questions about this Privacy Notice, you can contact me via email.

3. What Information Is Collected

I may collect and process the following categories of personal data:

Personal Information

  • Name, date of birth, address, and contact details

  • Emergency contact details (where appropriate)

  • GP details

Health and Sensitive Information (Special Category Data)

  • Medical and mental health history

  • Psychological assessment data (including ADHD assessments where applicable)

  • Session notes and clinical records

  • Correspondence relating to your care

Administrative Information

  • Appointment records

  • Payment and billing information

4. Legal Basis for Processing

Your personal data is processed under the following lawful bases:

  • Article 6(1)(b) – processing necessary for the performance of a contract

  • Article 6(1)(c) – compliance with legal obligations

  • Article 6(1)(f) – legitimate interests (safe and effective provision of psychological services)

Special category data (health information) is processed under:

  • Article 9(2)(h) – provision of health care or treatment

5. How Your Information Is Used

Your data is used to:

  • Provide psychological therapy and/or assessment services

  • Conduct clinical assessments and produce reports

  • Maintain accurate clinical records

  • Communicate with you regarding appointments and care

  • Ensure safe, ethical, and effective practice

  • Meet professional and legal obligations

6. Confidentiality and Sharing of Information

Your information will be kept confidential and will not be shared without your consent, except in the following circumstances:

  • There is a risk of serious harm to yourself or others

  • There are safeguarding concerns involving a child or vulnerable adult

  • Disclosure is required by law or court order

  • Disclosure is necessary for legal proceedings

  • Information is discussed within clinical supervision (anonymised)

With your consent, information may also be shared with:

  • Your GP

  • Other relevant healthcare professionals

7. Clinical Supervision

As part of professional requirements set by the Health and Care Professions Council, clinical work is regularly discussed in supervision to ensure safe and effective practice.

All information shared in supervision is anonymised, and supervisors are bound by confidentiality.

8. Data Storage and Security

Your data is stored securely using appropriate technical and organisational measures, including:

  • Password-protected electronic systems

  • Secure storage of digital records

  • Restricted access to personal data

  • Encryption where appropriate

Reasonable steps are taken to protect your data from loss, misuse, or unauthorised access.

9. Data Retention

Records are retained for 7 years following the end of contact, in line with professional and legal guidance.

After this period, records will be securely deleted or destroyed.

10. Your Rights

Under GDPR, you have the right to:

  • Access your personal data

  • Request correction of inaccurate or incomplete data

  • Request erasure (where applicable)

  • Restrict or object to processing

  • Request data portability (where applicable)

Requests should be made in writing and will be responded to within one month.

11. Communication

Communication will typically take place via secure methods such as email or telephone.

Please note:

  • Email and electronic communication carry some inherent risks

  • It is your responsibility to ensure your own devices are secure

Sensitive clinical matters will be discussed within sessions rather than via electronic communication.

12. Website and Online Services

If you use my website or online booking systems, limited data (such as contact details and appointment information) may be collected.

Please refer to any additional website-specific privacy or cookie policies where applicable.

13. Complaints

If you have concerns about how your personal data is handled, please raise this in the first instance.

You also have the right to lodge a complaint with the:

Information Commissioner's Office

14. Changes to This Privacy Notice

This Privacy Notice may be updated from time to time.

The most current version will always be available on my website or provided on request.

bottom of page