Privacy notice.
How we collect, use and protect information during enquiry, booking and autism assessment.
Who is responsible for your information
ILLUMINA is the working name for a private autism assessment service provided by Dr Dan Stevens and Dr Jess Stock, Clinical Psychologists. Before launch, this section will identify the final legal business entity, its contact details and whether the clinicians act through that entity as a single controller or as joint controllers.
What information we collect
Depending on where you are in the assessment process, we may collect:
- name, date of birth and contact details;
- information you provide in an enquiry or booking;
- developmental, educational, medical and mental-health information;
- questionnaire and assessment responses;
- information from a parent, partner, family member or other developmental informant;
- relevant reports or records that you or another professional provide;
- clinical notes, formulation, diagnostic conclusions and recommendations;
- payment and basic administrative information.
Because an autism assessment involves health information, much of the information we process is special-category personal data.
Where information comes from
Most information comes directly from you. With your knowledge and where appropriate, we may also receive information from a parent or other informant, a referrer, or another professional involved in your care. We may review school reports, previous clinical reports or other records that you provide or authorise us to obtain.
Why we use it
We use personal information to respond to enquiries, decide whether our service is suitable, arrange appointments, carry out the assessment, reach and explain a clinical opinion, write your report, make recommendations, manage payment and administration, and meet professional or legal responsibilities.
Our final privacy notice will state the precise UK GDPR lawful bases used. For the core service, we expect these to include taking steps at your request before entering a contract, performing the assessment contract, processing health information for the provision of health care by regulated professionals, and meeting relevant legal or professional obligations.
Where you have a genuine choice, such as whether we send a report to your GP or consult an external specialist, we will explain the choice and seek appropriate permission.
How long we keep records
We will keep clinical records for an appropriate professional and legal retention period. Because the service may assess both adults and young people aged 14+, the final retention schedule needs to distinguish between adult and under-18 records. We will insert the agreed retention periods here before launch.
How we keep information secure
We will use systems appropriate for confidential clinical information and limit access to people who need it for the purposes of the service. Before launch we will document the specific systems used for clinical records, email, questionnaires, payments and backups, and check any international data transfers or processor arrangements.
Your data-protection rights
Depending on the circumstances, you may have rights to access your information, ask for inaccurate information to be corrected, object to or restrict some uses, request erasure in some situations, or receive certain information in a portable format. Some rights are limited where clinical records need to be retained for professional, legal or safeguarding reasons.
You can contact us if you have a question about your information or want to exercise a data-protection right.
Questions or complaints about information
Before launch we will add the service email, postal contact and ICO registration details here. If you remain unhappy about how your personal information has been handled, you can complain to the Information Commissioner’s Office (ICO).