07532 725 802

INFO@ENHANCEPSYCHOLOGY.CO.UK

Privacy Policy

Effective date: 5th May 2026
Last updated: 5th May 2026

1. Who I Am

I am Clare Bentall, an independent Educational Psychologist providing assessment,
consultation, and intervention services for children, young people, families, and schools.

Data Controller

Clare Bentall, Enhance Psychology Services
3, Carroll Close, Stratford-upon-Avon, CV37 7LQ
clare@enhancepsychology.co.uk
07532725802

I am registered with the Information Commissioner’s Office (ICO) as required under UK data protection law who can be contacted at
www.ico.org.uk.

2. What Information I Collect

‘Personal data' is information that identifies you. If we've removed your identity
(by making the data anonymous), it won’t be classed as personal data.
I may collect, use, store and process the following types of personal data:

a) Personal Information

  • Name, address, email, contact details and financial information (for invoice purposes) (parents/carers, young people, professionals)

b) Sensitive (Special Category) Data

  • Information about a child or young person’s learning needs
  • Cognitive abilities
  • Emotional wellbeing
  • Behaviour
  • Medical or developmental history
  • Assessment data such as cognitive, social, emotional, sensory, physical health, language and communication assessments

c) Professional Information

  • School reports
  • Previous assessments (e.g. SEN reports, EHCPs)
  • Communication from teachers or other professionals
  • Referral information and documents from non-medical professionals such as autism outreach services, speech and language therapists, and counsellors

d) Website Data

  • Basic technical data (e.g. IP address, browser type)
  • Cookies (see Section 8)

3. How I Use Your Information

I process personal data in order to:

  • Provide educational psychology services
  • Conduct assessments and write reports
  • Communicate with families, schools, and professionals
  • Arrange appointments and manage enquiries
  • Meet legal and professional obligations

4. Legal Basis for Processing

Under the UK General Data Protection Regulation (UK GDPR), I rely on:

  • Consent – where you have given clear permission
  • Contract – where processing is necessary to provide services
  • Legal obligation – where I must comply with the law
  • Vital interests – where necessary to protect a child or individual
  • Legitimate interests – for running my practice effectively

For sensitive data, I rely on explicit consent and provision of health/educational services.

5. How Your Information Is Stored

  • Records are stored securely (electronically and/or in locked storage)
  • Digital data is password-protected and encrypted where appropriate
  • I take appropriate steps to prevent unauthorised access, loss, or misuse

6. How Long I Keep Data

I retain records in line with professional guidance and legal requirements — typically
up to 7 years after last contact and for children, records may be kept until the
individual reaches age 25. After this period, data is securely deleted or destroyed.

7. Sharing Your Information

I only share information where necessary and appropriate:

  • With schools, local authorities, or other professionals (with consent)
  • Where required by law or safeguarding concerns
  • With secure service providers (e.g. encrypted email or storage systems, including Dropbox for cloud-based storage and processors who provide IT and system administration services)
  • Assessment platform providers such as Q Interactive, which we share the client’s (child’s) date of birth and client reference number
  • Professional advisers including lawyers, accountants, bankers, auditors and insurers who provide consultancy, banking, legal, insurance and accounting services
  • As an HCPC accredited clinician, I am obliged to consult with another mental health professional for supervision purposes. This is to ensure I reflect and improve on my clinical skills. When discussing clients in supervision we only refer to clients by their first name and identifiable information is minimised
  • HM Revenue & Customs, regulators and other authorities who require reporting of processing activities in certain circumstances
  • Debt collection agencies in the event that payment is not received for services rendered. This will be done to recover any outstanding debts, and the debt collectors will process your data solely for this purpose

I do not sell or share data for marketing purposes. All the above third parties have a
requirement to respect the security of your personal data. We do not permit them to use
your personal data for their own purposes – they are only permitted to process your data
for specified purposes in line with our instructions.

8. Cookies and Website Use

My website may use cookies to:

  • Improve functionality and user experience
  • Analyse website traffic

You can control cookie settings through your browser.

9. Your Rights

Under UK GDPR, you have the right to:

  • Access your personal data
  • Request correction of inaccurate data
  • Request erasure (where appropriate)
  • Restrict or object to processing
  • Withdraw consent at any time
  • Lodge a complaint with the ICO

10. Safeguarding

If I believe there is a risk of harm to a child or individual, I may share information
without consent in line with safeguarding responsibilities.

11. Contact

If you have any questions about this privacy policy or your data, please contact:

Clare Bentall
clare@enhancepsychology.co.uk
07532725802

12. Changes to This Policy

I may update this policy from time to time. The latest version will always be available
on my website.