Privacy policy.

The type of personal information we collect  

We currently collect and process the following information: 

  • Personal identifiers, contacts and characteristics (for example, name and contact details) 

  • Sensitive health information, including information about mental health. 

  • Financial information 

  • Employee data 

  • Website user information 

How we get the personal information and why we have it 

Most of the personal information we process is provided to us directly by you for one of the following reasons: 

  • Registration with our service 

  • To provide you with appropriate assessment and treatment for your or your child’s condition. 

  • To take payment for our services 

  • To meet employment law regulations with respect to employees 

We also receive personal information indirectly, from the following sources in the following scenarios: 

  • We may seek information from your or your child’s GP with your consent

  • We may seek information from your child’s school with your consent

We use the information that you have given us in order to assess and treat your child and to collect payment for services.  

We may share this information with your GP or your child’s school with your consent. 

Under the UK General Data Protection Regulation (UK GDPR), the lawful bases we rely on for processing this information are:  

(a) Your consent. You are able to remove your consent at any time. You can do this by contacting info@held.health or 01392 796491 

(b) We have a legal obligation. 

(d) We have a vital interest. 

How we store your personal information  

Your information is securely stored.  

We keep Health records in accordance with NHS England recommendations and financial information only as long as you are provided services from us.

We will then dispose your information securely. 

Your data protection rights 

Under data protection law, you have rights including: 

  • Your right of access - You have the right to ask us for copies of your personal information.  

  • Your right to rectification - You have the right to ask us to rectify personal information you think is inaccurate. You also have the right to ask us to complete information you think is incomplete.  

  • Your right to erasure - You have the right to ask us to erase your personal information in certain circumstances.  

  • Your right to restriction of processing - You have the right to ask us to restrict the processing of your personal information in certain circumstances.  

  • Your right to object to processing - You have the the right to object to the processing of your personal information in certain circumstances. 

  • Your right to data portability - You have the right to ask that we transfer the personal information you gave us to another organisation, or to you, in certain circumstances. 

  • You are not required to pay any charge for exercising your rights. If you make a request, we have one month to respond to you. 

Please contact us at

Held Health

The Generator, Quay House 

The Gallery, Kings Wharf,  

The Quay, Exeter, EX2 4AN 

info@held.health 

01392 796 491 

How to raise a concern

If you have any concerns about our use of your personal information, you can make a complaint to us at: 

Held Health Limited 

The Generator, Quay House 

The Gallery, Kings Wharf,  

The Quay, Exeter, EX2 4AN 

info@held.health 

01392 796 491 

 

You can also complain to the ICO if you are unhappy with how we have used your data. 

The ICO’s address:             

Information Commissioner’s Office 

Wycliffe House 

Water Lane 

Wilmslow 

Cheshire 

SK9 5AF 

 

Helpline number: 0303 123 1113 

ICO website: https://www.ico.org.uk