Privacy Policy for ADHD Assessments & Services | ADHDdegree

Last updated: 25 January 2025

Introduction

Welcome to ADHDdegree’s Privacy Policy. Your privacy is important to us, and we are committed to protecting your personal information. This Privacy Policy explains how we collect, use, and share your data when you use our services or visit our website at https://adhddegree.co.uk.

This policy aligns with our Terms and Conditions and complies with the General Data Protection Regulation (GDPR) and other applicable data protection laws.

Terminologies

This Privacy Policy includes the following key definitions:

Data: Personal information provided by users or collected automatically.
Cookies: Small files stored on a user’s device to improve website functionality and experience.
GDPR: General Data Protection Regulation (EU 2016/679).
User: Any individual using the ADHDdegree website or services who is not an employee or consultant of ADHDdegree.

Scope of This Policy

This policy applies to data collected via our website at https://adhddegree.co.uk and through booking platforms such as Pabau or Calendly. It does not apply to external websites accessed via links from ADHDdegree. We encourage users to review the privacy policies of third-party websites before sharing their data.

Data We Collect

ADHDdegree may collect the following types of data:

Personal Information: Name, date of birth, gender, contact details (email, phone number), address, and GP details.
Service-Related Information: Booking details, assessment data, medical history, and prescription records.
Payment Information: Debit/credit card details (processed securely via Stripe).
Technical Information: IP address, browser type, device details, and website usage data.
Preferences: Communication preferences, cookie settings, and survey responses.

How We Collect Data

We collect data through the following methods:

Direct User Input: Via booking forms, contact forms, and questionnaires.
Third Parties: Referrals from GPs, NHS clinics, or other practitioners.
Automated Means: Cookies and website analytics tools.

How We Use Your Data

We use your data to provide and improve ADHD assessments, diagnoses, and treatments, manage bookings and follow-ups, process payments securely via Stripe, and share necessary medical information with your GP or relevant healthcare professionals (with your consent). Additionally, your data helps us conduct internal research to enhance our services.

Sharing Your Data

We may share your data with healthcare providers, including GPs and partner clinicians, to deliver services seamlessly. Service providers, such as IT platforms and payment processors (e.g., Pabau, Calendly, Stripe), may also have access to your data. We may share information with law enforcement if required to prevent fraud or criminal activities.

Cookies

ADHDdegree uses cookies to enhance user experience and analyze website performance. For more details on managing cookies, visit About Cookies.

We use the following types of cookies:

Essential Cookies: Required for website functionality, such as login and bookings.
Analytical Cookies: Help us track user activity to improve services.
Preference Cookies: Store user settings for personalized experiences.

Data Retention

We retain personal data only as long as necessary for the purposes outlined in this policy or as required by law. Data may be archived or anonymized when no longer needed.

Your Rights

Under GDPR, you have the right to access your personal data, request corrections, request deletion (subject to legal obligations), restrict processing, request data portability, and object to processing based on legitimate interests. To exercise your rights, contact us at hello@adhddegree.co.uk.

Data Security

We implement industry-standard security measures, including encrypted data storage, secure payment processing via SSL, and regular security audits and access controls. For online safety tips, visit Get Safe Online.

International Data Transfers

Data transferred outside the European Economic Area (EEA) is protected by appropriate safeguards, such as binding corporate rules and data transfer agreements under GDPR.