This policy explains how ADHD Health Ltd (“ADHD Health”, “we”) collects, uses and protects your personal information when you use our website and services. We take your privacy seriously, especially because much of the information we hold is about your health.
Who we are
ADHD Health Ltd is a company registered in England and Wales, number 00000000. ICO registration number ZA000000. We are the data controller for the information described here. You can contact our data protection lead at hello@adhdhealth.co.uk.
Information we collect
- Contact details, such as your name, email address, phone number, address and date of birth
- Health information, including questionnaires, assessment notes, reports, prescriptions and correspondence
- Information from other people, such as your GP, a parent, partner or informant, or your child’s school, with your consent
- Payment information, which is handled by our payment provider; we don’t store your full card details
- Website information, such as messages sent through our enquiry form and the essential cookies described in our cookie policy
How and why we use it
We use your information to respond to enquiries, provide assessment and treatment, communicate with you, keep accurate clinical records, take payment and meet our legal and regulatory duties.
Under UK data protection law, our lawful bases are:
- providing the service you’ve asked for (contract), and for health information, the provision of health care by or under the responsibility of a health professional
- complying with legal obligations, for example keeping medical records and safeguarding
- our legitimate interests in running and improving our service, for example replying to enquiries
- your consent, where we ask for it, for example before contacting your child’s school or sending you news
Who we share it with
We only share what is needed, and usually with your consent. This may include your GP, your child’s school, pharmacies that dispense your prescriptions, and trusted suppliers who provide our clinical record, video, email and payment systems under contract. We may share information without consent where the law requires it, or to protect someone from serious harm.
We never sell your information, and we don’t use it for advertising.
Where it is stored
We use secure systems based in the UK wherever possible. If a supplier stores data outside the UK, we make sure appropriate safeguards are in place.
How long we keep it
We keep medical records for the periods recommended by the Records Management Code of Practice for Health and Social Care. For mental health records, which include ADHD assessments, this is usually 20 years after your last contact with us, or 8 years after death if sooner. Enquiries that don’t lead to care are deleted after 12 months.
Your rights
You can ask for a copy of your information, ask us to correct it, and in some cases ask us to delete or restrict it, or object to how we use it. Some rights are limited for medical records, which we must keep. To make a request, contact hello@adhdhealth.co.uk. We’ll respond within one month.
If you’re unhappy with how we’ve handled your information, please tell us. You can also complain to the Information Commissioner’s Office at ico.org.uk or on 0303 123 1113.
Changes to this policy
We’ll update this page if anything changes and show the date of the latest version at the top.