Version 1 – June 2025

www.littlemindspsychology.co.uk

Little Minds Psychology Services Ltd is committed to respecting your privacy and the security of your personal data. This privacy policy outlines how and why data is collected, processed, stored, and shared, in line with the UK General Data Protection Regulation (UK GDPR) and Data Protection Act 2018. This document is reviewed and updated regularly to reflect current legislation and best practice.

A privacy policy explains how personal data—including special category data such as health or educational information—is collected and managed. This may include identifiable details such as names, dates of birth, addresses, school information, and information about your child’s development or family background.

Little Minds Psychology Services Ltd was founded by Dr Hayley White, a HCPC registered Practitioner Psychologist and Educational Psychologist.
 

I am registered with the Health and Care Professions Council (HCPC) and adhere to the British Psychological Society (BPS) Code of Ethics and Conduct, as well as the SEN Code of Practice (2014).
 

As the data controller, I am responsible for the processing and safeguarding of personal data within my service. I only collect data essential to the delivery of my services and store it securely and only for as long as necessary.

Data is collected for several key reasons:
- To gain informed consent
- To maintain records of communications and interventions
- To liaise with you about your child’s needs
- To understand your child’s developmental and educational background
- To complete assessments and interventions
- To evaluate outcomes and impact
- To create psychological reports
- To issue invoices and receive payment
 

The types of data collected may include:
- Parent/carer and child names
- Contact information (email, phone, address)
- Educational and school information
- Health and developmental history
- Information from other professionals/services involved

If you contact me via my website (hosted by GoDaddy.com) I may collect your name, email address, and any information provided in your message. This data is only retained within email correspondence and not stored elsewhere unless agreed upon.

Before any involvement, you will receive an information sheet and consent form. Signing this form gives me permission to collect, use, and store data as per this policy. You may withdraw your consent at any time, without explanation.
 

During consultations, I may collect further information including:
- Reason for referral
- Family and developmental history
- School attendance and academic performance
- Involvement from other agencies
- Relevant previous assessments and reports
 

I will never seek information from or share information with third parties without your explicit consent, except where there are safeguarding concerns.

All data is stored securely. This may include:
- Electronic data stored on a password-protected, encrypted laptop accessible only by me
- Paper documents (e.g., handwritten notes or assessment forms) stored in a locked cabinet in a secure home office
 

Reports and documentation are typically shared via encrypted email. Physical copies will only be provided upon request.

I retain personal data only for as long as necessary:
- Data is stored for 12 months from the date of consent unless our involvement continues
- Once the working relationship ends, all records will be securely deleted or destroyed
- It is your responsibility to retain copies of any reports or communications you may wish to keep

Information will only be shared:
- With your informed consent
- With relevant professionals (e.g., school staff or therapists) as agreed
- When required by law or where there are safeguarding concerns that require immediate action
 

If a safeguarding concern arises, I may share relevant information without prior consent if it is in the best interest of the child.

Under UK GDPR, you have the following rights:
- Right to be informed – about how your data is used
- Right of access – to request copies of your data
- Right to withdraw – consent at any time
- Right to rectification – to request corrections to inaccurate data
- Right to erasure – to request deletion of data under certain circumstances
- Right to restrict or object – to how your data is processed
 

Please note, legal or safeguarding obligations may override these rights in some instances.
 

To make a data request, email: LittleMindsPsychology@gmail.com

In the event of a data breach that poses a risk to your rights or freedoms, I will notify the Information Commissioner's Office (ICO) and any affected parties as required by law.

If you have concerns about how your data is handled, please contact me directly. If unresolved, you may contact the ICO at www.ico.org.uk.