NHS Patient Privacy Notice
- Edward Goredema
- Jun 2
- 2 min read
Date of Issue: June 2025, to be reviewed June 2026
Policy Summary
At The Warren Neurodiversity Service (The WNS), we are committed to safeguarding your
personal data. This notice outlines how we collect, use, and protect your information in
accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
Data Protection Principles
We adhere to the following principles: - Lawfulness, Fairness, and Transparency: Processing your data lawfully and transparently. - Purpose Limitation: Collecting data for specified, legitimate purposes. - Data Minimisation: Ensuring data is adequate and limited to what is necessary. - Accuracy: Keeping data accurate and up to date. - Storage Limitation: Retaining data only as long as necessary. - Integrity and Confidentiality: Processing data securely.
Data Controller and Contact Information
Data Controller: The Warren Neurodiversity Service
Address:
Quatro House, Lyon Way
Frimley Road, Camberley
GU16 7ER
Email: admin@thewns.co.uk
Phone: 01276 916457
Purpose and Legal Basis for Processing
We process your personal data to:
- Provide clinical assessments and treatments for ADHD and Autism.
- Fulfil contractual obligations with NHS Clinical Commissioning Groups (CCGs) or Integrated Care Boards (ICBs).
- Comply with legal obligations.
- Obtain your consent for specific purposes.
Categories of Personal Data Collected
We may collect:
- Personal Information: Name, date of birth, contact details.
- Health Information: Medical history, assessment results, treatment plans.
- Referral Information: Details from NHS referrals.
Data Sharing
Your information may be shared with:
- The WNS clinical and administrative staff involved in your care.
- Your GP or referring NHS body.
- Educational institutions, with your consent.
- Pharmacies, if medication is prescribed.
We ensure all third parties comply with data protection laws.
Data Storage and Security
- Storage: Data is stored securely on servers located within the UK or EEA.
- Security Measures: We implement appropriate technical and organisational measures to protect your data.
Data Retention
We retain your data:
- Adults: For 20 years from the date of your last appointment or 10 years after your death,
whichever is sooner.
- Children: Until you reach the age of 25 (or 26 if you were 17 at the time of your last
appointment).
Your Rights
You have the right to:
- Access your personal data
- Request correction of inaccurate data
- Request erasure of your data
- Object to processing
- Request data portability
- Withdraw consent at any time
To exercise these rights, contact us at admin@thewns.co.uk.
Complaints
If you have concerns about how we handle your data, you can contact:
Information Commissioner's Office (ICO):
Phone: 0303 123 1113
Website: www.ico.org.uk/concerns
Updates to This Notice
We may update this privacy notice periodically. The latest version will always be available on
our website: www.TheWNS.co.uk