Cognition Clinical Psychology Privacy Policy
Effective Date: 27th October 2025
Cognition Clinical Psychology – Psychology Assessment & Consultancy Services
United Kingdom

Contact Us
If you have questions about this Privacy Policy or how your data is handled, please contact:
Dr James Winkworth
Cognition Clinical Psychology
admin@cognitionclinicalpsychology.co.uk
07720499899

Introduction
At Cognition Clinical Psychology (!we”, !us”, or !our”), we are committed to protecting and respecting your privacy.
This Privacy Policy outlines how we collect, use, store, and share personal data when delivering psychological assessment and consultancy services, including assessments for Autism, ADHD, and Learning Disability, as well as training, supervision, and advisory services.
We process your data in accordance with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, and relevant professional codes such as those from the British Psychological Society (BPS) and the Health and Care Professions Council (HCPC).

Who We Are
Data Controller:
Dr James Winkworth, Cognition Clinical Psychology
admin@cognitionclinicalpsychology.co.uk
07720499899
ICO Registration Number: ZC025232

Services Covered
This policy applies to all services we offer, including: Diagnostic assessments for Autism, ADHD, and Learning Disability. Psychology reports Consultation to schools, professionals, and organisations Training, workshops, and webinars Supervision or professional development for practitioners

What Data We Collect
We collect different types of data depending on the service:
a. Personal Information
Full name
Date of birth
Contact details (address, email, phone number)
Education/employment background
b. Health and Special Category Data
Medical and psychological history
Previous diagnoses or assessment reports
Assessment responses and observational data
Notes from consultations or interviews
Audio/video recordings (only with explicit consent)
c. Educational & Cognitive Data
Learning profiles
Cognitive test results (e.g., WISC, WAIS)
Academic performance data
Behavioural observations
d. Administrative & Financial Data
Consent forms
Appointment records
Payment information
Invoicing and receipts
e. Training/Consultancy Participants
Names and roles (where applicable)
Organisation/employer name
Feedback or evaluation forms

How We Collect Data
We collect data through:
Direct interactions (in-person, phone, email, online forms)
Referral from third parties (e.g., schools, GPs, local authorities)
Professional correspondence
Online booking or payment systems
Training registrations or evaluation forms

Lawful Basis for Processing
Under the UK GDPR, we rely on the following lawful bases to collect and use your data:
Consent – where freely given (e.g. training feedback, recordings)
Contract – to provide assessment or consultancy services
Legal obligation – e.g., safeguarding or tax reporting
Vital interests – to protect someone”s life or prevent serious harm
Legitimate interest – where processing is necessary for our business
Health and social care – under Article 9(2)(h) for special category data related to health assessments

How We Use Your Data
We use your data to:
Deliver psychological assessments, diagnoses, and reports
Provide consultancy and training services
Offer tailored recommendations for education, care, or support
Communicate with you regarding appointments or services
Liaise with other professionals (e.g., teachers, GPs) with your explicit consent
Maintain secure clinical or administrative records
Process payments and issue invoices and receipts
Evaluate and improve our services (e.g. training feedback)

Sharing Your Data
We only share your data where necessary and with appropriate safeguards, only with consent.
Schools, local authorities, or other professionals (with consent or where required)
Regulatory bodies (e.g., HCPC, ICO) if legally required
Safeguarding authorities in cases of serious risk
Accountants or legal advisors for legitimate business purposes
We will never sell or share your data for marketing purposes.

Data Security
We take your privacy seriously and use a combination of physical, technical, and organisational
measures to protect your data. This includes:
Encrypted digital storage systems
Password-protected devices and accounts
Limited access based on need-to-know
Confidential disposal of physical files

Data Retention
In line with professional guidelines:
Clinical data is retained for a minimum of 7 years after the last contact (or until a child turns 25,
whichever is longer)
Training/consultancy-related data is kept for up to 3 years unless required for financial or regulatory reasons
After the retention period, data is securely deleted or destroyed.

Your Rights
Under data protection law, you have the right to:
Access a copy of your data
Request correction of inaccurate or incomplete data
Request erasure of data (in certain cases)
Object to or restrict processing
Withdraw consent at any time (where relevant)
Request data portability (if applicable)
Lodge a complaint with the ICO
To exercise your rights:
Contact us at: admin@cognitionclnicalpsychology.co.uk
ICO Contact:
Website: https://ico.org.uk
Helpline: 0303 123 1113

Cookies and Website Use
If you use our website:
We may use cookies to track anonymised usage data
You will be informed and given a choice to accept or reject cookies
Website forms may collect basic contact information when submitted

Third Party Services
We may use secure third-party platforms for booking, assessments, video calls, or file sharing.
Examples include:
[Video conferencing, e.g., Zoom or Microsoft Teams]
[Cloud storage, e.g., Google Drive or OneDrive]
[Assessment platforms, e.g., Q-global, Pearson]
These services are selected for their security standards and data protection compliance.

Changes to This Policy
This Privacy Policy may be updated to reflect changes in services, law, or best practice. The latest
version will always be available on our website or on request.