Privacy Notice
Privacy Notice
At Beyond the Question, we take your privacy seriously. As a UK-based psychology practice, we are committed to complying with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.Who We Are
The data controller is Tanya Banfield.
Email: Tanya@beyondthequestion.org
Phone: 07903 744175
What We Collect
We may collect and process personal information including:- Name and contact details
- Demographic data
- Clinical or health-related data (where relevant)
- Correspondence by email or phone
- Payment and invoicing information
Why We Collect It
We collect your data to:
- Provide psychological services
- Communicate with you effectively
- Comply with legal and ethical obligations
- Maintain records and process payments
Our lawful bases include consent, contract, legal obligation, and legitimate interest.
Where we process special category data (e.g. health data), it is done under Article 9(2)(h) – for the provision of health or social care.
Confidentiality & Sharing
Your data is kept confidential and will only be shared:- With referrers (e.g. GPs) with your consent
- When required by law or in emergencies (e.g. risk of harm)
- With regulatory authorities, if legally required
- We uphold the ethical codes of the British Psychological Society (BPS) and HCPC.
How We Store Your Data
Data is securely stored using encrypted, password-protected systems. Paper records are locked away. Staff and associates are trained in data protection.How Long We Keep It
Adult client records: 7 years after last contactChild client records: until age 25
Employee records: 6 years post-employment
Your Rights
You have rights under UK GDPR including:- Access, correction, or deletion of your data
- Restriction or objection to processing