Privacy Statement
This policy outlines how Lighthouse Supports complies with the General Data Protection Regulation (GDPR) laws that came into effect on 25 May 2018. Further information about GDPR can be found at www.ico.org.uk
Our contact details
Name: Lighthouse Supports
Address: 2 Manse Place, Bathgate, EH48 1NJ
Email: katy@lighthousesupports.co.uk
The type of personal information we collect
We collect and process the following information:
Personal identifiers such as your name, address and contact details including telephone numbers and email addresses
GP contact details
Education contact details for the purposes of gathering assessment information
Assessment information required to deliver a clinical service to you (for example, developmental history, education information, mental health history).
Financial information obtained in the process of receiving and requesting payments
How we get the personal information and why we have it
Most of the personal information we process is provided to us directly by you for one of the following reasons:
To enable the delivery of and administration of professional clinical services, such as a therapeutic assessment and support.
We may also receive personal information indirectly from the following sources in the following scenarios:
Education providers, for example when we request assessment information from your/your child’s school or teacher.
Other clinicians who have worked with you, for example a Speech and Language Therapist.
We use the information that you have given us in order to provide professional clinical services, including assessment and support. We may also use your data to communicate important information about the operation of our services and to gather client feedback on our services.
Under the General Data Protection Regulation (GDPR), the lawful basis we rely on for processing this information is that Curious Minds has a legitimate interest in using the personal data and information we collect to provide a health service (assessment). This data is necessary for us to provide the service.
What we do with your personal information
We will only use your personal information to provide the services you have requested from us. If you do not provide the personal information requested, then we may be unable to provide a service to you.
We will never share your information with any third party for the purposes of marketing or research.
We will only share your information, for example an assessment outcome, with relevant third parties where you request us to do so, and this request is confirmed in writing by you.
Who we might share your personal information with
The information we process about you and your assessment is received in confidence, and therefore not normally shared with anyone else.
However, there may be exceptions to this when there may be need for liaison with other parties:
Where we need to contact education providers to gather further information as part of our assessment. We only do this with your written consent. We may be unable to complete our assessment if we are unable to access this information.
Where we need to contact other clinicians or professionals who have worked with you, and their information is required for completion of our assessment (for example a report from a Speech & Language Therapist).
In exceptional circumstances, we might need to share personal information with relevant authorities:
When there is need-to-know information for another health provider, such as your GP.
When disclosure is in the public interest, to prevent a miscarriage of justice or where there is a legal duty, for example a Court Order.
When the information concerns risk of harm to the client, or risk of harm to another adult or a child. We will discuss such a proposed disclosure with you unless we believe that to do so could increase the level of risk to you or to someone else.
How we store your personal information
All your information is securely stored and compliant with GDPR regulations. We only store your personal information for as long as is required.
All hand written notes taken during the assessment are scanned and uploaded electronically to your individual client file. Written notes are then securely disposed of. All electronic notes are stored in password-protected files and stored securely in accordance with GDPR regulations.
We use a securely encrypted GDPR compliant email system and will send any reports and resources via this system.
The personal data defined above is stored for a period of 7 years after the end of assessment. After this time the data is destroyed.
If you commence input with Lighthouse Supports for your young person which requires face to face contact (including remote contact such as Google Meet) we open a case file and comply with data retention law relating to children’s records. The law states that children’s records must be kept:
Until the child is 25 (or 26 if they were 17 when treatment ends) or 8 years after their death if sooner.
If the child’s illness could be relevant to an adult condition, or have genetic implications for their family, records must be kept until the client’s death.
We may retain your data to satisfy any legal, accounting, or reporting requirements so for example we need to keep certain information about you for 6 years after you cease to be a client for tax purposes.
You have the right to ask us to delete the personal data we hold about you in certain circumstances.
Your data protection rights
Under data protection law, you have rights including:
Your Right Of Access
You have the right to ask us for copies of your personal information.
Your Right To Rectification
You have the right to ask us to rectify personal information you think is inaccurate. You also have the right to ask us to complete information you think is incomplete.
You are not required to pay any charge for exercising your rights. If you make a request, we have one month to respond to you.
Your Right To Complain
If you have any concerns about our use of your personal information, you can make a complaint to us at katy@lighthousesupports.co.uk
You can also complain to the ICO if you are unhappy with how we have used your data.