This Privacy Notice explains how ADHD-Plus (formerly Psychiatry UK) collects, uses, stores, and shares personal data, and outlines your rights under applicable Data Protection legislation. It applies to all personal information processed by or on behalf of ADHD-Plus.
2 Scope
This Notice covers:
The identity of the Data Controller;
The purposes for which personal data is processed;
The lawful basis for processing;
Your rights under UK GDPR and the Data Protection Act 2018 (DPA18);
Internal teams and external organisations with whom data may be shared;
The role of third-party processors;
Storage and retention of personal data;
Circumstances in which data may be shared without consent;
How to raise an objection or complaint; and
Contact details for the Data Protection Officer, the Patient Experience Team, and the Information Commissioner’s Office (ICO).
3 Legal Framework
The UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018 govern the protection of confidential and sensitive information. These laws came into force on 25 May 2018.
Following the UK’s withdrawal from the European Union, the UK has entered into an Adequacy Agreement with the EU, enabling the continued transfer of personal data between the UK and EU/EEA countries without additional safeguards. The European Commission has granted the UK “adequacy status”, confirming that UK data protection standards meet the required level of protection for such transfers.
4 Data Controller
For the purposes of UK GDPR and DPA18, the Data Controller is: Psychiatry UK ICO Registration Number: ZB515474
5 Commitment to Privacy
We are committed to protecting your privacy and safeguarding your personal data. All processing activities are carried out in compliance with applicable law, and only to the extent necessary to deliver safe, effective, and lawful services.