Cognition Clinical Psychology Privacy Policy
Effective Date: 27th October 2025
Cognition Clinical Psychology – Psychology Assessment & Consultancy Services
United Kingdom
Contact Us
If you have questions about this Privacy Policy or how your data is handled, please contact:
Dr James Winkworth
Cognition Clinical Psychology
admin@cognitionclinicalpsychology.co.uk
07720499899
Introduction
At Cognition Clinical Psychology (!we”, !us”, or !our”), we are committed to protecting and respecting your privacy.
This Privacy Policy outlines how we collect, use, store, and share personal data when delivering psychological assessment and consultancy services, including assessments for Autism, ADHD, and Learning Disability, as well as training, supervision, and advisory services.
We process your data in accordance with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, and relevant professional codes such as those from the British Psychological Society (BPS) and the Health and Care Professions Council (HCPC).
Who We Are
Data Controller:
Dr James Winkworth, Cognition Clinical Psychology
admin@cognitionclinicalpsychology.co.uk
07720499899
ICO Registration Number: ZC025232
Services Covered
This policy applies to all services we offer, including: Diagnostic assessments for Autism, ADHD, and Learning Disability. Psychology reports, Consultation to schools, professionals, and organisations. Training, workshops, and webinars Supervision or professional development for practitioners
What Data We Collect
We collect different types of data depending on the service:
a. Personal Information
Full name
Date of birth
Contact details (address, email, phone number)
Education/employment background
b. Health and Special Category Data
Medical and psychological history
Previous diagnoses or assessment reports
Assessment responses and observational data
Notes from consultations or interviews
Audio/video recordings (only with explicit consent)
c. Educational & Cognitive Data
Learning profiles
Cognitive test results (e.g., WISC, WAIS)
Academic performance data
Behavioural observations
d. Administrative & Financial Data
Consent forms
Appointment records
Payment information
Invoicing and receipts
e. Training/Consultancy Participants
Names and roles (where applicable)
Organisation/employer name
Feedback or evaluation forms
How We Collect Data
We collect data through:
– Direct interactions (in-person, phone, email, online forms)
– Referral from third parties (e.g., schools, GPs, local authorities)
– Professional correspondence
– Online booking or payment systems
– Training registrations or evaluation forms
Lawful Basis for Processing
Under the UK GDPR, we rely on the following lawful bases to collect and use your data:
– Consent – where freely given (e.g. training feedback, recordings)
– Contract – to provide assessment or consultancy services
– Legal obligation – e.g., safeguarding or tax reporting
– Vital interests – to protect someone”s life or prevent serious harm
– Legitimate interest – where processing is necessary for our business
– Health and social care – under Article 9(2)(h) for special category data related to health assessments
How We Use Your Data
We use your data to:
– Deliver psychological assessments, diagnoses, and reports
– Provide consultancy and training services
– Offer tailored recommendations for education, care, or support
– Communicate with you regarding appointments or services
– Liaise with other professionals (e.g., teachers, GPs) with your explicit consent
– Maintain secure clinical or administrative records
– Process payments and issue invoices and receipts
– Evaluate and improve our services (e.g. training feedback)
Sharing Your Data
We only share your data where necessary and with appropriate safeguards, only with consent.
– Schools, local authorities, or other professionals (with consent or where required)
– Regulatory bodies (e.g., HCPC, ICO) if legally required
– Safeguarding authorities in cases of serious risk
– Accountants or legal advisors for legitimate business purposes
We will never sell or share your data for marketing purposes.
Data Security
We take your privacy seriously and use a combination of physical, technical, and organisational measures to protect your data. This includes:
– Encrypted digital storage systems
– Password-protected devices and accounts
– Limited access based on need-to-know
– Confidential disposal of physical files
Data Retention
In line with professional guidelines:
– Clinical data is retained for a minimum of 7 years after the last contact (or until a child turns 25, whichever is longer)
– Training/consultancy-related data is kept for up to 3 years unless required for financial or regulatory reasons
– After the retention period, data is securely deleted or destroyed.
Your Rights
Under data protection law, you have the right to:
– Access a copy of your data
– Request correction of inaccurate or incomplete data
– Request erasure of data (in certain cases)
– Object to or restrict processing
– Withdraw consent at any time (where relevant)
– Request data portability (if applicable)
– Lodge a complaint with the ICO
To exercise your rights:
Contact us at: admin@cognitionclnicalpsychology.co.uk
ICO Contact:
Website: https://ico.org.uk
Helpline: 0303 123 1113
Cookies and Website Use
If you use our website:
– We may use cookies to track anonymised usage data
– You will be informed and given a choice to accept or reject cookies
– Website forms may collect basic contact information when submitted
Third Party Services
We may use secure third-party platforms for booking, assessments, video calls, or file sharing.
Examples include:
– Video conferencing, e.g., Zoom or Microsoft Teams
– Cloud storage, e.g., Google Drive or OneDrive
– Assessment platforms, e.g., Q-global, Pearson
These services are selected for their security standards and data protection compliance.
Changes to This Policy
This Privacy Policy may be updated to reflect changes in services, law, or best practice. The latest version will always be available on our website or on request.