Last Updated: 28/02/2026

JR Psychology Ltd (“we,” “us,” or “our”) is committed to protecting the privacy and security of your personal information. This privacy notice describes how we collect and use personal information about you during and after your working relationship with us, in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

JR Psychology Ltd is a "data controller." This means that we are responsible for deciding how we hold and use personal information about you and your child.

1. The Kind of Information We Hold

We may collect, store, and use the following categories of personal information:

  • Contact Data: Name, address, email address, and telephone numbers.

  • Child Data: Name, date of birth, gender, and school.

  • Special Category Data: Health information, disability status, psychological assessment results, and educational history.

  • Financial Data: Bank account details for invoicing and payment processing.

  • Website Usage Data: IP address and cookies (if you use our website contact form).

2. How We Collect This Data

We collect personal information through:

  • Inquiry forms on our website.

  • Direct correspondence (email, phone, or post).

  • Consultations with parents, guardians, and school staff.

  • Observations and direct assessment work with children.

3. How We Use Your Information

We will only use your personal information when the law allows us to. Most commonly, we use it:

  1. To perform the contract we have entered into with you or the commissioning school.

  2. To comply with a legal obligation (e.g., safeguarding or tax records).

4. Special Category Data

As we process sensitive health and psychological data, we do so under Article 9 of the UK GDPR, specifically where processing is necessary for the provision of health or social care or treatment.

5. Data Sharing

We may share your data with third parties, including:

  • The Commissioning School: Reports and consultation notes are shared with the school as part of the agreed casework.

  • Healthcare Professionals: Only with express consent (e.g., GPs, Paediatricians).

  • Regulatory Bodies: Such as the HCPC or ICO if required by law.

  • Cloud Service Providers: Secure, encrypted platforms used for report storage and invoicing.

6. Data Security

We have put in place appropriate security measures to prevent your personal information from being accidentally lost, used, or accessed in an unauthorized way.

  • All digital files are stored on encrypted, password-protected systems.

  • Hard copies (if any) are stored in locked filing cabinets.

7. Data Retention

We will only retain your personal information for as long as necessary to fulfill the purposes we collected it for. In line with professional psychological guidelines, we typically retain records until the child reaches the age of 25. After this period, records are securely destroyed.

8. Your Legal Rights

Under certain circumstances, you have the right to:

  • Request access to your personal information (a "Data Subject Access Request").

  • Request correction of the personal information that we hold about you.

  • Request erasure of your personal information (subject to legal/clinical retention requirements).

  • Object to processing of your personal information.

9. Contact Us

If you have any questions about this privacy notice or how we handle your data, please contact:

Data Protection Officer: Jade Russell

Email: jaderussell@jrpsychology.com