Privacy Policy

Privacy Policy – Neuro Head Therapy

1. Introduction

Neuro Head Therapy is committed to protecting your privacy and handling your personal data responsibly and securely. This Privacy Policy explains how personal information is collected, used, stored, and protected in accordance with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, and applicable professional confidentiality obligations.

1. Information We Collect

We may collect and process the following categories of information:

• Personal identification details (such as name, address, date of birth, email address, and telephone number)
• Health, wellbeing, psychological, neurodevelopmental, and screening-related information relevant to the services requested
• Communication records, including emails, telephone calls, text messages, and WhatsApp communications
• Appointment, referral, and service history
• Payment, invoicing, and billing information
• Information voluntarily provided through website forms or consultations

1. How Your Information Is Used

Your information may be used for the following purposes:

• Providing therapy, psychoeducation, screening, and related support services
• Managing appointments, enquiries, and communication
• Preparing reports, supporting letters, and professional documentation
• Maintaining accurate professional and clinical records
• Complying with legal, safeguarding, insurance, and professional obligations
• Improving the safety, quality, and effectiveness of services

1. Legal Basis for Processing

Your information is processed under one or more of the following lawful bases:

• Consent
• Contractual necessity
• Legitimate interests
• Legal obligation
• Provision of health and support services

Special category data, including health-related information, is processed in accordance with Article 9 UK GDPR where applicable.

1. Confidentiality

All information shared with Neuro Head Therapy is treated as confidential and handled in accordance with professional ethical standards.

Confidentiality may be breached where there is a lawful or ethical obligation to disclose information, including but not limited to:

• Risk of serious harm to yourself or others
• Safeguarding concerns involving children or vulnerable adults
• Prevention or detection of serious crime
• Compliance with legal obligations, court orders, or regulatory requirements

Where appropriate, efforts will be made to discuss disclosure with you first unless doing so would increase risk or be unlawful.

1. Data Storage and Security

Personal data is stored securely using appropriate technical and organisational security measures designed to protect against unauthorised access, loss, misuse, alteration, or disclosure.

Only authorised individuals involved in service provision will have access to your information where necessary.

1. Data Sharing

Your information will not normally be shared with third parties without your consent unless:

• Disclosure is required by law
• There are safeguarding or serious risk concerns
• Information is required by a court, regulator, insurer, or professional body
• Sharing is necessary with your GP, solicitor, school, workplace, or another professional at your request or with your consent

1. Data Retention

Records will be retained only for as long as reasonably necessary in accordance with professional, legal, safeguarding, and insurance requirements, after which they will be securely deleted or destroyed.

1. Your Rights

Under UK GDPR, you may have the right to:

• Access your personal data
• Request correction of inaccurate or incomplete information
• Request erasure of data where legally applicable
• Restrict or object to certain forms of processing
• Withdraw consent where processing is based on consent
• Request data portability where applicable
• Lodge a complaint with the Information Commissioner’s Office (ICO)

1. Online Communication

While reasonable steps are taken to protect your information, communication via email, telephone, SMS, or WhatsApp may not be completely secure. By using these communication methods, you acknowledge and accept the potential security risks associated with electronic communication.

1. Website & Cookies

The Neuro Head Therapy website may use cookies, analytics tools, or third-party services to improve website functionality and user experience. Users may manage cookie preferences through their browser settings where applicable.

1. Updates to This Policy

This Privacy Policy may be updated periodically. The latest version will always be available on the Neuro Head Therapy website.

1. Contact

If you have any questions regarding this Privacy Policy or how your personal data is handled, you may contact Neuro Head Therapy directly using the contact details provided on the website.