Fundamental Health Ltd
Privacy Policy
Version: 1.0
Effective Date: 1st August 2026
Review Date: 1st August 2027
Privacy Notice
Fundamental Health Ltd is committed to protecting your privacy and handling your personal information fairly, lawfully and transparently.
This Privacy Notice explains how we collect, use, store and protect your personal information in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
1. Who We Are
Fundamental Health Ltd provides independent mental health assessments and intervention services for adults.
Data Controller
Fundamental Health Ltd
Director: Debra Dew, Registered Mental Health Practitioner
Registered Office: 7 Glenrhondda, Emmer Green, Reading, Berkshire, RG4 8LB
Email: admin@fundamentalhealth.co.uk
Telephone: 07504956161
Company Number: 06971515
ICO Registration Number: ZB104769
2. Information We Collect
Depending on the services you receive, we may collect:
Personal Information
- Full name
- Date of birth
- Address
- Email address
- Telephone number
- GP details
- Emergency contact details
Health Information
As a healthcare provider we collect special category data including:
- Mental health history
- Physical health information relevant to your care
- Medication history
- Risk assessments
- Clinical notes
- Assessment reports
- Care plans
- Correspondence with other professionals (where appropriate)
Financial Information
- Payment records
- Invoices
- Transaction history
We do not store full debit or credit card details.
3. Why We Collect Your Information
We collect personal information to:
- Provide safe and effective mental health care.
- Complete mental health assessments.
- Deliver interventions.
- Maintain accurate clinical records.
- Communicate with you regarding appointments.
- Process payments.
- Meet our legal and professional obligations.
- Protect your safety and the safety of others where necessary.
4. Our Lawful Basis for Processing
Under UK GDPR we process your information under the following legal bases:
Article 6 UK GDPR
- Performance of a contract.
- Compliance with legal obligations.
- Legitimate interests.
- Vital interests where necessary to protect life.
Article 9 UK GDPR
Health information is processed because it is necessary for the provision of health care and the management of health services.
5. Confidentiality
Everything discussed during therapy or assessment is treated confidentially.
However, confidentiality may need to be broken where:
- there is a serious risk of harm to you;
- there is a serious risk to another person;
- a child or vulnerable adult is at risk of abuse or neglect;
- disclosure is required by law or court order;
- professional regulatory requirements apply.
Where possible, this will be discussed with you first.
6. Sharing Your Information
Your information will only be shared where necessary.
This may include:
- Your GP (with your consent where appropriate).
- Other healthcare professionals involved in your care.
- Emergency services.
- Adult or Children’s Safeguarding Services.
- The Police where legally required.
- Professional advisers or insurers where necessary for legal or regulatory purposes.
We will never sell your personal information.
7. How We Store Your Information
Your records are stored securely using encrypted electronic systems.
We take appropriate technical and organisational measures to protect your information against:
- Unauthorised access
- Loss
- Theft
- Alteration
- Disclosure
Only authorised persons have access to your information.
8. How Long We Keep Your Information
Clinical records are normally retained for eight years after your last appointment, in accordance with NHS Records Management Code of Practice guidance for adult health records.
After this period records will be securely destroyed unless there is a legal reason to retain them for longer.
Financial records will be retained for the period required by HM Revenue & Customs.
9. Your Rights
Under UK GDPR you have the right to:
- Be informed about how your information is used.
- Request access to your personal information.
- Request correction of inaccurate information.
- Request restriction of processing in certain circumstances.
- Object to certain types of processing.
- Request data portability where applicable.
- Lodge a complaint with the Information Commissioner’s Office (ICO).
Please note that healthcare providers are legally required to retain clinical records, meaning the right to erasure (“the right to be forgotten”) does not generally apply to clinical records where retention is required by law or for the establishment, exercise or defence of legal claims.
10. Access to Your Records
You may request a copy of your personal information at any time.
Requests should be made in writing to:
Email: admin@fundamentalhealth.co.uk
There is normally no charge for providing a copy of your information unless requests are excessive or repetitive.
11. Website
If you visit our website we may collect limited technical information including:
- IP address
- Browser type
- Device information
- Cookies
This information helps improve website performance and security.
Please refer to our Cookie Policy for further information.
12. Changes to This Privacy Policy
This Privacy Policy may be updated from time to time to reflect changes in legislation or business practice.
The most recent version will always be available on our website.
13. Contact
If you have any questions about how your personal information is handled, please contact:
Fundamental Health Ltd
Email: admin@fundamentalhealth.co.uk
Telephone: 07504956161
14. Complaints About Data Protection
If you are unhappy with how we have handled your personal information, please contact us first so that we can try to resolve your concerns.
You also have the right to complain to the Information Commissioner’s Office.
Information Commissioner’s Office
Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF
Telephone: 0303 123 1113
Website: www.ico.org.uk
Approved by:
Peter Dew
Director
Fundamental Health Ltd
Version: 1.0
Review Date: 1st August 2027