Privacy Policy

The type of personal information we collect

We collect and process the following information:

• Personal identifiers such as your name, address and contact details including telephone numbers and email addresses
• GP contact details
• Education contact details for the purposes of gathering assessment information
• Assessment information required to deliver a clinical service to you (for example, developmental history, education information, mental health history).
• Financial information obtained in the process of receiving and requesting payments

How we get the personal information and why we have it

Most of the personal information we process is provided to us directly by you for one of the following reasons:

• To enable the delivery of and administration of professional clinical services, such as a specialist assessment.

We may also receive personal information indirectly from the following sources in the following scenarios:

• Education providers, for example when we request assessment information from your/your child’s school or teacher.
• Other clinicians who have worked with you, for example a Speech and Language Therapist.

We use the information that you have given us in order to provide professional clinical services, including assessment. We may also use your data to communicate important information about the operation of our services and to gather client feedback on our services.

Under the General Data Protection Regulation (GDPR), the lawful basis we rely on for processing this information is that Curious Minds has a legitimate interest in using the personal data and information we collect to provide a health service (assessment). This data is necessary for us to provide the service.

What we do with your personal information

We will only use your personal information to provide the services you have requested from us. If you do not provide the personal information requested, then we may be unable to provide a service to you.

We will never share your information with any third party for the purposes of marketing or research.

We will only share your information, for example an assessment outcome, with relevant third parties where you request us to do so, and this request is confirmed in writing by you.

Who we might share your personal information with

The information we process about you and your assessment is received in confidence, and therefore not normally shared with anyone else.

However, there may be exceptions to this when there may be need for liaison with other parties:

• Where we need to contact education providers to gather further information as part of our assessment. We only do this with your written consent. We may be unable to complete our assessment if we are unable to access this information.
• Where we need to contact other clinicians or professionals who have worked with you, and their information is required for completion of our assessment (for example a report from a Speech & Language Therapist).

In exceptional circumstances, we might need to share personal information with relevant authorities:

• When there is need-to-know information for another health provider, such as your GP.
• When disclosure is in the public interest, to prevent a miscarriage of justice or where there is a legal duty, for example a Court Order.
• When the information concerns risk of harm to the client, or risk of harm to another adult or a child. We will discuss such a proposed disclosure with you unless we believe that to do so could increase the level of risk to you or to someone else.

How we store your personal information

All your information is securely stored and compliant with GDPR regulations. We only store your personal information for as long as is required.  

All hand written notes taken during the assessment are stored in locked cabinets within a secure room at our clinic. They are securely disposed of once the assessment report is completed. All electronic notes are stored in password-protected files and stored securely in accordance with GDPR regulations.

We use securely encrypted GDPR compliant email system and will send copies of our assessment reports to you via this system. All electronic reports sent are password protected.

The personal data defined above is stored for a period of 7 years after the end of assessment. After this time the data is destroyed.

Your data protection rights

Under data protection law, you have rights including:

Your right of access

You have the right to ask us for copies of your personal information.

Your right to rectification

You have the right to ask us to rectify personal information you think is inaccurate. You also have the right to ask us to complete information you think is incomplete.

You are not required to pay any charge for exercising your rights. If you make a request, we have one month to respond to you.

Your right to complain –

If you have any concerns about our use of your personal information, you can make a complaint to us at info@curiousminds.scot

You can also complain to the ICO if you are unhappy with how we have used your data.