Privacy Policy Clarity Manchester is a company offering psychological assessment in relation to autism spectrum disorder. Clarity (also referred to as ‘we’, ‘us’, ‘our’) are committed to protecting and respecting your privacy. This document, along with our Terms and Conditions, demonstrates how we use and protect your data and ensure GDPR compliance. Our ICO registration number is:ZA319800 Why do we collect personal data? We collect information as you are a client or patient of ours. We have a number of lawful reasons to use / process your personal data. It is in our Legitimate Interests as a clinical psychologist to collect this information. We need to use this information to carry out assessments. Additionally, if you are a patient or client of Clarity we need to collect ‘special category data’ to provide health or social care treatment. What data do we collect? We collect information about you that might include personal or sensitive data, such as:- * Name, gender, address, telephone numbers, e mail and GP details * Communication data in text messages, e mails and voice mails * Information about your current complaints / difficulties * History about your background, including medical history, relationships, education / occupation To make sure you receive a safe and evidenced assessment / treatment, we record the above data along with a log of contacts you have with Clarity such as appointments, assessments results and letters / reports. Your data is kept confidential within the company at all times. We also process personal data in relation to our legitimate interests in running Clarity including:- * Invoices and receipts * Accounts, VAT and tax returns What rights do I have in respect of my personal data? You have the right to update and correct personal information. You have the right to request from Clarity all personal information that we hold that relates to you (Subject Access Request). You also have the right to object to the processing we carry out based on our legitimate interests. In addition, you have the right to request restriction of the processing of that data and to request that we delete the data (right to be forgotten). How do we store your personal data? We take your privacy very seriously and take all reasonable steps to protect any identifiable information that you provided to us. Once we receive your data, we make best efforts to ensure its security on our systems. All personal information provided is stored in compliance with EU General Data Protection Regulations (GDPR) rules. Clarity used handwritten notes which are stored securely. Any data on computers is password protected to guarantee the safety of store data. Any data on portable devices is password protected or a hard drive that is stored securely. E mails will be sent and received to Proton Mail, which is a double encrypted service based in Europe. Where personal data is shared as part of an enquiry, and the client is not taken on, this will be deleted as soon as possible. How long do we keep the data for? We do not keep your data for longer than is necessary. Confidential paper records will be destroyed by means of confidential shredding when data is deemed no longer required for lawful processing and storage i.e. following a period of 7 years since the completion of psychological assessment or intervention. Electronic data is permanently deleted from encrypted storage by the same standard as paper records. Who do we share information with? Your information is kept confidential within Clarity. Identifiable information will be minimised (where possible) so that individual patients / clients cannot be identified. Permission will be sought at the initial session to share any information with 3rd parties, usually in the form of a report. The option to share information with a person’s GP will also be discussed at the initial session. There are certain circumstances in which we will need to breach confidentiality where there is sufficient evidence to raise concern about the safety of a) the client b) other people known to the client and c) the health, welfare or safety of children or vulnerable adults. If the client makes any threats towards a 3rd party which are relayed to us we will be duty bound to advise the appropriate authorities. As part of our professional conduct, as compliant with the Health Care Professionals Council, we are required to undertake supervision of clinical activity. All individuals involved in supervisory practices adhere to a strict code of professional conduct. Information discussed and recorded as part of this process is anonymous. What can you do if you have a concern or complaint? If you have a complaint or concern about the way in which Clarity uses your personal information you have the right to complain to Dr Kate Leonard, Centric Consulting Rooms, 21a Marsland Road, Sale M33 3HP. If you do not receive a response within 30 days you are not satisfied with the response you have the right to complain to the ICO whose address is Wycliffe House, Water Lane, Wilmslow, SK9 5AF. www.Ico.org.uk Changes to this Privacy Policy If this Privacy Policy changes in any way, we will put an updated version on the website. Regularly reviewing the website ensures you are always aware of what information we collect, how we use it and how we protect it