Privacy policy

1. Who we are

ADHD Doctors Ltd (company number [number]) is the data controller for the information we hold about you. We are registered with the Information Commissioner's Office (registration [number]). Our Data Protection Officer can be contacted at [DPO email].

2. Information we collect

• Identity and contact details: name, date of birth, address, email, phone, NHS number
• Health information: questionnaires, assessment notes, diagnoses, medication, correspondence with your GP
• Payment information, processed by our PCI-compliant payment provider; we do not store card numbers
• Website usage data collected through cookies and analytics

3. How we use it

We use your information to provide clinical care, communicate with you and your GP (with your consent), process payments, meet our legal and regulatory obligations to the CQC and NHS, and improve our services. Our lawful bases include performance of a contract, legal obligation, and, for health data, the provision of health care under Article 9(2)(h) UK GDPR.

4. Sharing

We share information only where necessary: with your GP and pharmacy for your care, with the NHS where you are referred under Right to Choose, with our secure clinical records and video platform providers, and where required by law. We never sell your data.

5. Storage and security

Clinical records are stored on an encrypted, UK-hosted clinical system and retained in line with the NHS Records Management Code of Practice (generally 8 years for adults, and until the 25th birthday for children). Access is limited to staff involved in your care.

6. Your rights

You have the right to access your records, to have inaccuracies corrected, to object to or restrict certain processing, to data portability, and to complain to the ICO at ico.org.uk. To exercise your rights, contact our Data Protection Officer.

7. Cookies

Our website uses essential cookies and, with your consent, analytics cookies. You can change your preferences at any time through your browser settings.