Valued Living
Valued Living Ltd Privacy Notice
Last updated: 16th of July 2026
This notice explains how Valued Living Ltd collects, uses, stores and shares personal information.
1. Who we are
Valued Living Ltd provides psychological assessment, therapy, psychology, organisational, occupational health, rehabilitation and medico-legal services.
Valued Living Ltd is the data controller for personal information collected directly by us. In some commissioned or instructed services, another organisation may also be a controller, or may be the primary controller, for example an employer, occupational health provider, insurer, solicitor, case manager, public body or other referrer.
Our contact details are:
-
Valued Living Ltd, company number 12960462
-
Clinic address: Molescroft Surgery, 30 Lockwood Road, Beverley, East Riding of Yorkshire, HU17 9GQ
-
Email: talk@valuedliving.co.uk
-
Telephone: 01430 411063
Please contact us using the details above if you have any questions about this notice or how we use your information.
2. The information we collect
The information we collect depends on how you contact us and the service involved. It may include the following:
Website and general enquiries
-
Your name, contact details and organisation.
-
The nature of your enquiry and any information you choose to include in a message.
-
Technical information such as your IP address, device and browser information, website usage and cookie preferences.
Private therapy enquiries and clinical services
-
Your name, date of birth, contact details, postcode and GP practice.
-
Information about the support you are seeking, your symptoms, difficulties, history, preferences and availability.
-
Information about previous or current therapy, mental health or social care involvement, medication, risk, safeguarding and emergency contacts where relevant.
-
Assessment information, clinical notes, treatment plans, outcome measures, correspondence, reports and discharge information.
-
Payment, insurance or funding information.
-
Information about reasonable adjustments, communication preferences or accessibility needs.
Organisational, occupational health, insurer and rehabilitation referrals
-
Referral details, identity and contact information.
-
Employment, role and work-related information relevant to the referral.
-
Clinical information, functional impact, attendance, engagement, progress and treatment recommendations.
-
Reports and correspondence required under the agreed pathway.
-
Information supplied by the referring organisation and information provided directly by the person referred.
Medico-legal work
-
Letters of instruction, pleadings, schedules, witness statements, medical and employment records and other case documents.
-
Personal, clinical, occupational, social and functional information relevant to the instruction.
-
Assessment notes, psychometric or outcome measures, expert or condition and prognosis reports, correspondence and invoices.
-
Information about solicitors, insurers, case managers, experts and other professionals involved in the case.
Referrers, clinicians, suppliers and other professionals
-
Professional contact details, role, qualifications, registration, insurance, compliance and contractual information.
-
Correspondence, invoices, payment details and information needed to manage our working relationship.
3. Special category information
Information about physical or mental health is special category personal data under UK data protection law. We may also receive other special category information, such as information concerning disability, ethnicity, religion, sexual orientation or sex life, where it is relevant to assessment, treatment, risk, safeguarding, reasonable adjustments or the instructed purpose.
We only collect and use this information where it is necessary and where an appropriate condition under data protection law applies. We apply additional safeguards to this information.
4. How we obtain information
We may receive information:
-
Directly from you through our website, by email, telephone, video call, in person or during assessment and treatment.
-
From a parent, guardian, representative or emergency contact where appropriate.
-
From an employer, occupational health provider, insurer, solicitor, case manager, healthcare provider, public body or other referrer.
-
From clinicians and other professionals involved in your care or case.
-
From records and documents supplied for assessment, treatment, reporting or medico-legal purposes.
-
Automatically through website cookies and similar technologies, subject to your choices.
5. Why we use your information
We use personal information to:
-
Respond to enquiries and discuss whether our services may be suitable.
-
Triage referrals and match people with an appropriately qualified clinician.
-
Arrange, deliver and review assessment, therapy, psychology and related services.
-
Maintain clinical and administrative records.
-
Monitor outcomes, quality, safety and service performance.
-
Prepare agreed clinical, occupational health, rehabilitation and medico-legal reports.
-
Communicate with clients, referrers, funders, representatives and relevant professionals.
-
Manage appointments, payments, invoices, contracts and complaints.
-
Meet professional, safeguarding, legal, regulatory, insurance and contractual obligations.
-
Protect the rights, safety and wellbeing of clients, staff, clinicians and others.
-
Maintain and improve our website, information security and services.
6. Our lawful bases
We must have a lawful basis under Article 6 of the UK GDPR whenever we use personal information. Depending on the circumstances, we may rely on:
-
Contract: where processing is necessary to take steps at your request before entering into a contract, or to provide a service under a contract.
-
Legitimate interests: where processing is necessary to operate and improve our services, manage referrals, communicate with relevant parties, maintain records, protect our organisation and respond to enquiries, provided those interests are not overridden by your rights.
-
Legal obligation: where we must process information to comply with the law, professional duties, tax, accounting, safeguarding or regulatory requirements.
-
Vital interests: where processing is necessary to protect someone’s life or physical safety.
-
Consent: where we have specifically asked for consent and it is appropriate to rely on it. Consent can be withdrawn, although this will not affect processing already carried out lawfully.
Where we process health information or other special category data, we also rely on an Article 9 condition. Depending on the service and circumstances, this may include:
-
Health or social care purposes, including assessment, treatment, management of care and the management of health services, carried out by or under the responsibility of professionals subject to confidentiality obligations.
-
Explicit consent, particularly at the initial enquiry stage or where consent is the most appropriate condition.
-
Establishment, exercise or defence of legal claims, including medico-legal assessment and reporting.
-
Substantial public interest conditions where applicable, including safeguarding or protecting individuals at risk.
-
Vital interests where a person is physically or legally incapable of giving consent and processing is necessary to protect life.
The lawful basis and special category condition may differ depending on whether you contact us privately, are referred under a commissioned pathway, or are involved in medico-legal proceedings.
7. If another organisation refers or instructs us
Where another organisation refers you or instructs us, it should provide its own privacy information explaining how it uses your data. We may need to share information with that organisation in accordance with the referral pathway, contract or instruction.
We will explain the expected reporting arrangements where possible. Reports will normally be limited to information relevant to the purpose of the referral or instruction. The exact relationship between Valued Living, the referrer and the clinician may vary. Each party may act as an independent controller for some processing activities.
8. Who we share information with
We only share information where there is a valid reason to do so. Recipients may include:
-
The clinician or clinical team providing the service.
-
Your GP, healthcare professionals, crisis services, safeguarding services or emergency services where clinically appropriate, authorised or necessary.
-
The referring or funding organisation, such as an employer, occupational health provider, insurer, solicitor, case manager, healthcare provider or public body, in line with the agreed pathway or instruction.
-
Professional advisers, insurers, auditors, regulators, courts, tribunals or law enforcement bodies where required or permitted by law.
-
Approved service providers supporting our website, secure communications, video appointments, document storage, administration, accounting, payments and information technology.
We do not sell personal information to third parties. We do not share clinical information for marketing purposes.
9. Confidentiality, risk and safeguarding
Clinical information is treated as confidential. Confidentiality is not absolute. Information may be disclosed without consent where this is necessary and proportionate, for example:
-
Where there is a serious and immediate risk of harm to you or another person.
-
Where there are safeguarding concerns involving a child or an adult at risk.
-
Where disclosure is required by law, a court order or a regulator.
-
For the establishment, exercise or defence of legal claims.
-
Where information is required under an agreed referral, reporting or medico-legal pathway and you have been informed of this arrangement.
Where practicable and safe, we will discuss a proposed disclosure with you before it is made.
10. How we store and protect information
We use organisational and technical measures designed to protect personal information against unauthorised access, accidental loss, alteration or disclosure.
Information may be stored in approved clinical, administrative and communication systems, including Wix and Microsoft 365, and with other vetted providers used for secure records, video appointments, accounting, payments and business administration.
Access is restricted to people who need the information for their role. Clinicians are required to follow confidentiality, data protection and professional standards.
11. International transfers
Some technology providers may store or process information outside the United Kingdom. Where this occurs, we take steps to ensure an appropriate transfer mechanism and safeguards are in place, such as UK adequacy regulations, the UK International Data Transfer Agreement, the UK Addendum to standard contractual clauses, or another lawful safeguard.
12. How long we keep information
We keep information only for as long as it is needed for the purpose for which it was collected and to meet professional, contractual, insurance, tax and legal requirements.
Our usual retention periods are:
-
General enquiries that do not lead to a service: normally up to 12 months after the last contact.
-
Private clinical records: normally 8 years after the end of treatment. Where the client is under 18, records may be retained until at least their 25th birthday, or longer where professional or legal requirements apply.
-
Organisational, occupational health, insurer and rehabilitation records: normally 8 years after the service or case closes, unless the contract or legal context requires a different period.
-
Medico-legal records: normally at least 8 years after the case or instruction concludes, and longer where necessary for legal claims, professional indemnity or the requirements of the instructing party.
-
Financial and accounting records: normally 6 years after the relevant financial year.
-
Complaints, incidents and safeguarding records: for the period required by law, professional guidance, insurance and our retention schedule.
These periods are general guides. We may retain information for longer where there is an ongoing complaint, legal claim, safeguarding concern, regulatory issue or another justified reason. Information will be securely deleted or anonymised when it is no longer required.
13. Cookies and website analytics
Our website may use essential cookies needed for it to function and optional cookies or similar technologies for analytics and performance. Where required, optional cookies will only be used with your consent. Please see our Cookie Policy and cookie settings for more information.
14. Marketing
We will not use health information or clinical records for marketing. We will only send direct marketing where this is lawful and, where required, where you have actively chosen to receive it. You can opt out at any time.
15. Your data protection rights
Depending on the circumstances and the lawful basis used, you may have the right to:
-
Ask for access to your personal information.
-
Ask us to correct inaccurate or incomplete information.
-
Ask us to erase information in certain circumstances.
-
Ask us to restrict how information is used in certain circumstances.
-
Object to processing based on legitimate interests or direct marketing.
-
Ask for information you provided to be transferred to you or another organisation where the right to data portability applies.
-
Withdraw consent at any time where we rely on consent.
-
Complain about how your information has been used.
These rights are not absolute. For example, we may need to retain clinical records to meet legal, professional, insurance or safeguarding requirements, and some information may be exempt from disclosure where it relates to another person or where a legal exemption applies.
To exercise a right, contact us at talk@valuedliving.co.uk. We may need to verify your identity before responding.
16. Children and young people
Our services may be provided to young people where this is clinically appropriate and within the scope of the service. We will consider age, understanding, capacity, parental responsibility, confidentiality and safeguarding when deciding how information is collected, used and shared.
A parent or person with parental responsibility may provide information, but a young person may also have confidentiality and data protection rights in their own name depending on their age and understanding.
17. Automated decision-making
We do not use solely automated decision-making that produces legal or similarly significant effects. Clinical allocation and treatment decisions involve professional judgement.
18. Complaints
Please contact us first if you have concerns about how we use your personal information:
-
Email: talk@valuedliving.co.uk
-
Telephone: 01430 411063
-
Post: Valued Living Ltd, Molescroft Surgery, 30 Lockwood Road, Beverley, East Riding of Yorkshire, HU17 9GQ
You also have the right to complain to the Information Commissioner’s Office. Information about making a complaint is available on the ICO website at ico.org.uk, or by telephoning 0303 123 1113.
19. Changes to this notice
We may update this privacy notice to reflect changes in our services, systems, legal obligations or guidance. The latest version will be published on our website with the date it was last updated.