Privacy policy

1. Who we are

Harley Mental Care Ltd, trading as ADHD Doctors and registered in England and Wales, is the data controller for the information we hold about you. We are registered with the Information Commissioner's Office. Our Data Protection Officer can be contacted at admin@adhddoctors.co.uk or by post at 10 Harley Street, London W1G 9PF.

2. Information we collect

• Identity and contact details: name, date of birth, address, email, phone, NHS number
• Health information: questionnaires, assessment notes, diagnoses, correspondence with your GP
• Payment information, processed by our PCI-compliant payment provider; we do not store card numbers
• Website usage data collected through cookies and analytics

3. How we use it

We use your information to provide clinical care, communicate with you and your GP (with your consent), process payments, meet our legal and regulatory obligations, and improve our services. Our lawful bases include performance of a contract, legal obligation, and, for health data, the provision of health care under Article 9(2)(h) UK GDPR.

4. Sharing

We share information only where necessary: with your GP for your care, with our secure clinical records and video platform providers, and where required by law. We never sell your data.

5. Storage and security

Clinical records are stored on an encrypted, UK-hosted clinical system and retained in line with the NHS Records Management Code of Practice (generally 8 years for adults, and until the 25th birthday for children). Access is limited to staff involved in your care.

6. Your rights

You have the right to access your records, to have inaccuracies corrected, to object to or restrict certain processing, to data portability, and to complain to the ICO at ico.org.uk. To exercise your rights, contact our Data Protection Officer.

7. Cookies

Our website uses essential cookies and, with your consent, analytics cookies. You can change your preferences at any time through your browser settings.