top of page

Privacy Policy

Purpose of this Policy 

Autism Assessments collects and processes personal data of clients in accordance with the principles and rights enshrined in the UK General Data Protection Regulation (GDPR). For the purposes of this policy, personal data refers to any information stored by us by which service users or people associated with them may be identified.        

This policy outlines the type of personal data we collect, how and why we collect it, and how it is stored. It also explains your rights under data protection law and how to complain if you are unhappy with how your data has been used.


The type of personal information we collect  

We will collect and process the following information about you if you choose to access our services: 

  • Name 

  • Date of birth 

  • Postal address 

  • Telephone number 

  • Email address 

  • GP address and telephone 

  • Emergency contact information 

  • Relevant clinical information 

  • A written record of clinical interviews and direct observations 

  • Written summaries of any other verbal or written correspondence with you or other people who are assisting with the assessment  

  • A report detailing the outcome of the assessment 

  • Payment details for services we have provided  


In order to carry out an assessment, it may also be necessary to collect contact details for people associated with you who can assist us. This may include (but is not limited to) family members, teachers or social services. 

How we get your personal information and why we collect it.


The majority of the personal information we collect as part of the assessment process is provided to us directly by you (or by parents or guardians if you are a child). However, as part of the assessment process, we may also receive information about you indirectly from people who know you, such as family members, teachers, or social workers. 

It is necessary for us to collect and process the personal information detailed above in order to carry out the assessment and diagnostic services we provide. To this end, your data is used for the following purposes: 

  • To contact you (or someone associated with you) regarding your assessment. This encompasses your initial telephone consultation through to a feedback appointment.  

  • To inform clinical assessment and diagnosis, including an outcome report. 

  • To maintain accurate clinical records. 

  • For payment purposes and to maintain accurate financial records.


There may be instances when it is necessary to share your personal information with relevant third parties, such as your GP. Information will only be shared with your explicit permission, unless we are concerned that failure to do so would put you or someone else at risk of harm. In these circumstances, we can share information without your consent.   

Under the General Data Protection Regulation (GDPR), the lawful bases we rely on for collecting processing your information are as follows: 

  • Your consent. If you choose to proceed with an assessment, you will be asked to complete a consent form stating that you agree to your data being collected and processed in accordance with this policy and GDPR. You are able to remove your consent at any time. You can do this by contacting Safeguarding exceptions may apply. 

  • We have a contractual obligation. It is necessary for us to collect and process the personal data detailed above in order to provide the assessment and diagnostic services you have requested from us. 

  • Vital interests. This is the legal basis for sharing your data with a third party for safeguarding reasons. The processing of your data would be deemed necessary to protect your safety or that of someone else.  


How we store your personal information  

We store all of the personal data detailed above securely in electronic form using GDPR compliant cloud-based software.  

Electronic communication will be used for correspondence and to send reports and any other relevant documents. All reports and documents will be password protected.  

All clinical data for clients under the age of 18 will be retained until they are 26 years old, while clinical records for adult clients will be stored for eight years. All data will be safely deleted once these time limits are reached. With regard to email correspondence, text messages and telephone contact, any relevant data will be extracted and added to the client’s clinical record, before being deleted within 180 days.      


Your data protection rights 

Under data protection law, you have rights including: 

Your right of access - You have the right to ask us for copies of your personal information.  

Your right to rectification - You have the right to ask us to rectify personal information you think is inaccurate. You also have the right to ask us to complete information you think is incomplete.  

Your right to erasure - You have the right to ask us to erase your personal information in certain circumstances.  

Your right to restriction of processing - You have the right to ask us to restrict the processing of your personal information in certain circumstances.  

Your right to object to processing - You have the the right to object to the processing of your personal information in certain circumstances. 

Your right to data portability - You have the right to ask that we transfer the personal information you gave us to another organisation, or to you, in certain circumstances. 

You are not required to pay any charge for exercising your rights. If you make a request, we have one month to respond to you. 


Please contact us at if you wish to make a request. 

For more information on your data protection rights, please visit:  



If you have any concerns about our use of your personal information, please contact Autism Assessments at  

You can also contact the Information Commissioner’s Office (ICO) directly if you are unhappy with how we have used your data. 

The ICO’s address:             

Information Commissioner’s Office 

Wycliffe House 

Water Lane 



SK9 5AF 


Helpline number: 0303 123 1113 

ICO website: 

bottom of page