Privacy Policy
Our contact details
Name: Bright Star ADHD
Address: 6 Tillington Terrace, Hastings, East Sussex, TN35 5JS
Phone Number: 07765 637944
E-mail: brightstaradhd@gmail.com
Date of last update: 01/09/2025
​
Collection of personal information
At Bright Star ADHD we collect personal information for these main reasons:
• Providing treatment
• Providing advice
• Improving our service
• Part of our normal business
NHS Care Record Guarantee
The NHS Care Record Guarantee for England sets out the rules that govern how patient
information is used in the NHS, what control the patient can have, and the rights individuals
have to request copies of their data and how data is protected under the Data Protection Act
2018. Our privacy policy and data protection arrangements will honour the Guarantee.
Further information:
https://www.nhs.uk/nhsengland/thenhs/records/healthrecords/documents/patientguida
ncebooklet.pdf
Our lawful basis for processing personal information
• Our lawful basis for processing and storing personal information is one of 'legitimate
interest' (under article 6 of GDPR). Bright Star ADHD cannot adequately deliver a service to
our patients without processing their personal information. As it is both a necessity for our
service delivery and of benefit to the patient, we have a legitimate interest to process and
store their data.
• Data relating to an individual’s health is classified as 'special category data' under section
9 of GDPR. The regulations specify that health professionals who are legally bound to
professional secrecy may have a lawful basis for processing this data. Bright Star ADHD
clinicians are legally bound to keep client information confidential, and it is under this
condition that we process and store personal information.
​
The type of personal information we collect
We may collect and process: names, dates of birth, postal addresses, email addresses,
bank/payment details, diagnosis details, treatment and prescription details, details of other
health professionals, appointment details, and information provided via online forms or
communications.
​
How we collect personal information
Most of the personal information we process is provided to us directly by you via our
website, email, telephone, videoconference, or forms.
​
Who we collect personal information from
We may collect data from clients, parents, carers, and with consent, from other
professionals involved in your care.
​
How we use personal information
Bright Star ADHD uses personal information:
• To prepare, plan, and provide therapy services appropriate to the patient's needs.
• To communicate with the client by post, email, telephone or text message in relation to
appointments, reports, resources, and invoices.
• For clinical audit to assess and improve services (identities always anonymised).
• For management and administration (records stored in secure systems).
• For prescribing, we may share data with pharmacies chosen to dispense medication.
Unless required by law, we will not disclose personal data to third parties beyond what is
described above. We will never sell client details.
​
How we store personal information
All client and patient records are stored securely in encrypted, password-protected
systems. Paper-based records are securely stored and/or digitised. All records will only be
retained for the minimum necessary time.
Data Retention Policy
At Bright Star ADHD, we are committed to storing your personal data responsibly and only
for as long as necessary. This section outlines how long we retain different types of
information and the reasons behind those timeframes.
​
Clinical & Medical Records
We retain clinical records (such as assessment reports, treatment plans, prescribing
information, and clinical correspondence) in line with guidance from the NHS Records
Management Code of Practice.
Adult clients: Records are kept for 8 years after the date of your last contact with us.
Clients under 18: Records are kept until the individual turns 25 years old, or 26 if they were
17 at the time of last contact.
These records are stored securely and may be required for continuity of care, clinical
review, or legal purposes.
Pre-Assessment Submissions (e.g. via Type form)
If you complete our online ADHD pre-assessment form but do not proceed with a full
assessment, your identifiable data will be retained for a maximum of 90 days and then
securely deleted.
You will only be contacted if your responses suggest that you may benefit from an ADHD
assessment and you have provided consent or expressed interest in being contacted.
Anonymised data may be retained beyond this period for internal research or statistical
purposes.
Administrative & Communication Records
We may retain emails, appointment bookings, or other non-clinical communications related
to enquiries, scheduling, or service management for up to 2 years from the date of your last
interaction, unless they form part of your clinical file.
Secure Storage & Deletion
All personal data is stored securely, with access restricted to authorised team members
only. When your data is no longer needed, it will be securely deleted or destroyed in
accordance with data protection regulations.
Your Rights
You have the right to:
-
Request access to your personal data
-
Ask us to correct, delete, or restrict the use of your data
-
Withdraw your consent (where applicable)
For more information or to make a request, please contact us at brightstaradhd@gmail.com.
Consent
With consent, information about your needs may be shared with other professionals
involved in your care when in your best interests. A record of consent is kept within case
notes.
​
Breach procedure
If any confidential data is lost, damaged or inappropriately accessed, Bright Star ADHD will:
• Notify the Data Protection Officer immediately
• Seek advice from the ICO
• Contact the client if advised to do so
Your data protection rights
Under data protection law, you have rights including:
• Access to your personal information
• Rectification of inaccurate or incomplete data
• Erasure in certain circumstances
• Restriction of processing in certain circumstances
• Objection to processing in certain circumstances
• Data portability in certain circumstances
Requests can be made to: brightstaradhd@gmail.com
We will respond within one month.
​
Security
We value your trust in providing us your personal information, and we use secure systems
to protect it. However, no method of electronic storage is 100% secure.
​
Children’s Privacy
We do not knowingly collect data from children under 13 without parental consent. If
discovered, such data will be deleted immediately.
​
Changes to This Privacy Policy
This Privacy Policy may be updated from time to time. The latest version will always be
available upon request or on our website.
​
How to complain
If you have concerns about how your data is used, please contact us at
brightstaradhd@gmail.com. You also have the right to complain to the Information
Commissioner’s Office (ICO).
ICO contact: Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF | Tel: 0303