Privacy is our priority
At Head Ways Psychology we take our responsibility for protecting and holding your personal data very seriously and will continue to do so in accordance with our professional codes of conduct and the GDPR regulations. Head Ways Psychology is registered with the Information Commissioner's Office (ICO) and keeps up to date with government legislation and procedures.
How we process data
The GDPR requires us to identify the legal basis upon which we process personal data. We take the following steps to ensure that our systems are lawful, fair and transparent to our clients:
- We will always ask parents to give consent for us to become involved in working with a child. Only at this point will we begin gathering data to inform our work.
- The intended purpose of gathering personal data is to carry out a psychological assessment. We have a legitimate interest to collect this data in order to form a professional opinion or formulation of the difficulties presented.
- We will only collect information that is relevant to the purpose of undertaking the assessment work. Depending on the nature of the work this information may include:
- Information about health, educational achievements, cognitive functioning, personality, interests and family history.
- Scores and qualitative information obtained through administering cognitive and dynamic assessment testing.
- When writing reports or summaries of our work we ensure that:
- The author of the report and organisation is clearly identified
- All parties who will receive copies of the report are clearly indicated
- Where third parties require access to our information (e.g. other professionals involved with the client) this has been discussed and agreed with our clients
- Reports and information are stored securely and only those with legitimate access can see them
- All communications via email containing personal data are anonymised, encrypted and password protected in place and in transit
- Following direct assessment work, personal data will be kept in an electronic copy of reports and in a hard copy file. We will ensure that:
- We will hold information for no longer than is reasonably necessary and will destroy it when it is no longer appropriate to hold it
- All files will be reviewed annually and those that no longer meet the point above will be destroyed.
- You can request to view the personal data that we hold at any time by contacting our data protection officer below. You are also able to request to remove or correct any information found to be inaccurate.
- No personal data is processed on our website. When using the site, we will set a temporary cookie to determine if your browser accepts cookies. This cookie contains no personal data and is discarded when you close your browser.
- We do hold email addresses for our clients (both schools and parents) in order to liaise during our involvement. We do not share this contact information with any third parties without clients permission and delete these contacts when our involvement ceases.
Should you have any questions or concerns in relation to your data protection or privacy rights, please contact Jo Binnington (Data Protection Officer) at firstname.lastname@example.org.