Privacy Policy
Privacy Policy for Dr Michael Chambers’ Services
Effective Date: 29 November 2025
​
This Privacy Policy explains how Dr Michael Chambers, an Educational Psychologist, collects, uses, stores, and protects your personal information and that of your child, in line with professional ethical guidelines (PSI, HCPC) and data protection legislation (GDPR/UK GDPR).
​
We are committed to maintaining the highest levels of confidentiality and trust.
​
1. About the Data Controller
The Data Controller responsible for the processing of your personal data is:
Contact Email: drmichaelchambers1@gmail.com Professional Registration: Chartered Psychologist (PSI), Registered Practitioner Psychologist (HCPC: [PYL039810])
​
2. Information We Collect
We collect information necessary to provide ethical, effective, and safe psychological services.
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
B. Website & Digital Data
When you visit our website, we collect minimal data through standard website tools:
-
Usage Data: Details about how you use our website (e.g., pages viewed, time spent). This is typically aggregated and anonymized unless you fill out a form.
-
Cookies: Small files placed on your device. We use strictly necessary cookies to ensure the website functions. We do not use aggressive third-party marketing or tracking cookies.​
​
3. How We Use Your Information
Your information is used solely for the following professional purposes:
-
To Provide Services: Delivering consultations, therapeutic support, and psychological assessments as agreed in our contract.
-
To Meet Professional Obligations: Maintaining accurate clinical records as required by the PSI and HCPC professional standards.
-
To Communicate: Contacting you regarding appointments, invoicing, or follow-up actions.
-
To Ensure Safety: Processing data relating to safeguarding concerns, which is a legal and ethical requirement.
​
4. Confidentiality, Storage, and Security
We take the security of your information extremely seriously.
-
Confidentiality: All psychological information is treated with the strictest confidence.
-
Storage: Records are stored securely, primarily using password-protected, encrypted electronic systems. Physical notes (if any) are kept in a locked cabinet.
-
Retention: We retain clinical records for the period required by professional bodies (PSI and HCPC), which typically mandates retention for a specific period after your child reaches adulthood. We will inform you of the exact retention period at the outset of our work.
5. Sharing Your Information
We never sell your data. We only share information in the following, strictly controlled circumstances:
-
With Your Explicit Consent: For example, sharing an assessment report with your child’s school, GP, or another professional, only after you have given written permission.
-
Legal or Ethical Obligations (Mandatory Disclosure): We are legally and ethically obliged to break confidentiality if we believe there is a serious and immediate risk of harm to your child, to others, or if required by a court of law. We will always endeavor to discuss this with you first, unless doing so would increase the risk of harm.
-
Supervision: To ensure the highest quality of service, anonymized case details may be discussed during mandatory professional supervision. Your identity and your child’s identity will always be protected in this context.
6. Your Data Protection Rights
Under GDPR/UK GDPR, you have the following rights regarding your personal data:
-
The Right to Access: You have the right to request a copy of the information we hold about you and your child.
-
The Right to Rectification: You can ask us to correct information you believe is inaccurate or incomplete.
-
The Right to Erasure (The Right to be Forgotten): You can ask us to delete your personal data, though this right may be limited by our legal and professional obligation to retain clinical records.
-
The Right to Restrict Processing: You can request that we limit how we use your data.
-
The Right to Object: You can object to certain types of processing, such as direct marketing (we do not engage in direct marketing).
-
The Right to Data Portability: You have the right to request a transfer of your data to another organization.
-
The Right to Withdraw Consent: Where we rely on your consent to process sensitive data, you have the right to withdraw that consent at any time.
To exercise any of these rights, please contact the Data Controller using the email address provided in Section 1.
7. Queries and Complaints
If you have any questions or concerns about how your data is handled, please contact us first. If you remain dissatisfied, you have the right to lodge a complaint with the relevant supervisory authority in the UK (Information Commissioner's Office - ICO) or in Ireland (Data Protection Commission - DPC).
Category of Data Examples Legal Basis for Processing (GDPR)
Identity & Contact Parent/Guardian Name, Child’s Name, Age, Address, Email, Phone Number. Contract (to deliver the service) and Legitimate Interest (administrative tasks).
Details of concerns, educational history, attempts to seek help, family situation, school reports.
​​
​
Psychological reports, clinical notes, mental health status, medical history, details about neurodevelopmental conditions (e.g., Autism, Dyslexia).
​
​​​
Payment details, invoice records.
Referral and Histroy
​
​
Special Category Data
​
​
​
​
Billing
​
​
Explicit Consent (for sensitive health data) and Contract (to provide psychological support).
​
Explicit Consent (as this is required for healthcare services).
​
Contract (to process payments) and Legal Obligation (for tax and accounting).