We treat your privacy with the highest priority. All personal and clinical data is stored and processed in strict accordance with the principles set out by the Information Commissioner’s Office (ICO) in the UK. This ensures your information is handled lawfully, transparently, and securely.

​We collect information necessary to provide our expert reporting services, which may include:

• Personal Contact Details: Name, address, phone number, and email address (for communication and invoicing).

• Clinical and Sensitive Data: Medical records, correspondence from the Department for Work and Pensions (DWP), assessment reports, and information discussed during the virtual clinic (necessary for report completion).

​

• Secure Storage: All clinical and personal information is stored securely using encrypted, password-protected systems. We use industry-standard security measures to protect your data from unauthorized access or disclosure.

• Data Minimisation: We only retain the information necessary to fulfill our service contract and meet regulatory requirements.

Our policy is designed to protect your sensitive clinical information through defined destruction periods:

1. Contract Completion: Once the contracted service (e.g., the final PIP supporting report) has been delivered to you and payment has been completed, we begin the process of data destruction.

2. Clinical Data Destruction: All sensitive clinical documentation, virtual clinic notes, and drafts are securely destroyed/purged from our systems shortly after the successful completion of the contract.

3. Retention: We will retain necessary personal and financial records (such as your name, contact details, service provided, and invoices) for the period required by UK tax and professional body regulations.

We do not sell or share your personal data with third parties for marketing purposes.

We only share clinical information when:

• It is explicitly required to fulfill the contract (e.g., sending the final report to you or your designated legal representative).

• We are legally required to do so (e.g., by court order).

Under UK data protection law, you have the right to request access to the information we hold about you, request corrections, and, in certain circumstances, request that your data be erased.