PRIVACY POLICY
Horizon Clinical Group Ltd Last Updated: September 2026
Horizon Clinical Group Ltd is committed to protecting your privacy and handling your personal information responsibly.
This Privacy Policy explains how we collect, use, store and protect personal information when you visit our website, contact us, make an enquiry, book an assessment or receive services from Horizon Clinical Group Ltd.
We process personal information in accordance with applicable UK data protection legislation, including the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018 and other applicable legal and professional requirements.
1. WHO WE ARE
Horizon Clinical Group Ltd is the data controller responsible for the personal information we process in connection with our website, enquiries and clinical services.
Company: Horizon Clinical Group Ltd
Website: www.horizonclinicalgroup.co.uk
Email: info@horizonclinicalgroup.co.uk
ICO Registration Number: ZC245589
Registered/Business Address: 71- 75 Shelton Street, Covent Garden, London, WC2H 9JQ
For questions about this Privacy Policy or how your information is handled, please contact us using the email address above.
2. WHAT PERSONAL INFORMATION WE COLLECT
Depending on how you interact with Horizon Clinical Group, we may collect the following information.
General personal information
This may include:
Full name
Date of birth
Email address
Telephone number
Home address
Postcode
Information relating to your eligibility to use our service
Booking and appointment information
Payment and transaction information
Information contained within correspondence with us
Clinical and health information
As part of an ADHD assessment, we may process special category health information, including information relating to:
Mental health
Physical health
Medical history
Psychiatric history
Developmental history
Childhood experiences and functioning
Current symptoms and difficulties
Previous assessments or diagnoses
Medication history where relevant
Information relating to education, employment and functioning
Relevant questionnaire responses
Information provided by an informant, where applicable
Clinical observations made during assessment
Clinical formulation and diagnostic outcome
The final clinical report
Health information is treated as special category data under UK data protection law and is subject to additional safeguards.
3. HOW WE COLLECT YOUR INFORMATION
We may collect personal information:
When you visit or use our website
When you submit an enquiry
When you contact us by email or telephone
When you complete an online form
When you make or manage an appointment
When you make a payment
When you complete pre-assessment or clinical questionnaires
During your clinical assessment
When you provide documents or information relevant to your assessment
From an informant where you have provided the relevant information or authority for this to occur
From your GP or another healthcare professional where appropriate and lawful
Our website is hosted and operated using Squarespace.
Squarespace may process certain information relating to visitors to our website, including information necessary for website functionality, security and, where enabled, analytics or other website services.
The specific cookies, analytics and other website technologies used by our website may change as the website develops. We will maintain appropriate cookie and privacy information to reflect the technologies actually in use.
4. HOW WE USE YOUR INFORMATION
We may use personal information to:
Respond to enquiries
Manage bookings and appointments
Confirm eligibility for our service
Provide ADHD assessment services
Complete clinical assessments
Communicate with you about your assessment
Prepare and provide clinical reports
Maintain accurate clinical records
Process payments and refunds
Provide customer and administrative support
Meet our legal, regulatory and professional obligations
Maintain the security of our website, systems and services
Deal with complaints or concerns
Respond to safeguarding or emergency situations where necessary
Establish, exercise or defend legal claims
Improve the security, functionality and performance of our website and services where appropriate
We will only use personal information for purposes that are lawful, necessary and compatible with the reason it was collected.
5. LAWFUL BASIS FOR PROCESSING
Under UK data protection law, we must identify a lawful basis for processing personal information.
The lawful basis we rely upon depends on the purpose for which the information is being processed.
Contract
We may process personal information where this is necessary to enter into or perform a contract with you, including arranging and providing the assessment service you have requested.
Health and social care
Where we process health information as part of providing healthcare services, we may rely upon the relevant UK GDPR special category condition applicable to the provision of health or social care by a health professional who is subject to a duty of confidentiality, together with an appropriate Article 6 lawful basis.
Legal obligation
We may process information where this is necessary to comply with a legal or regulatory obligation.
Vital interests
In limited circumstances, information may be processed or disclosed where necessary to protect someone’s vital interests, for example in a genuine emergency where a person is unable to provide consent.
Legitimate interests
Where appropriate, we may rely upon legitimate interests for activities such as maintaining the security of our systems, administering our business, preventing misuse and dealing with legal or administrative matters, provided that these interests are not overridden by your rights and interests.
Where we rely upon legitimate interests, we will consider whether the processing is necessary and proportionate.
The ICO confirms that organisations must identify the appropriate lawful basis for each processing purpose and, where special category data is processed, an additional special category condition is also required. (Information Commissioner’s Office)
6. CLINICAL CONFIDENTIALITY
Information you provide as part of your ADHD assessment will be treated confidentially and handled in accordance with applicable data protection law and professional obligations.
We will only disclose confidential information where there is an appropriate lawful basis to do so.
This may include circumstances where:
You have requested or authorised information to be shared
Sharing is necessary to provide or coordinate healthcare
We are legally required to disclose information
Disclosure is necessary to protect someone’s vital interests
There is a serious safeguarding or safety concern
Disclosure is otherwise permitted or required by law
We will seek to limit any disclosure to information that is relevant and necessary for the purpose.
7. INFORMATION SHARED WITH OTHER ORGANISATIONS
Where appropriate and lawful, information may be shared with selected third parties, which may include:
Healthcare professionals
With your consent or where otherwise lawful and appropriate, relevant clinical information or reports may be shared with your GP or another healthcare professional involved in your care.
Payment providers
Payment information may be processed by our chosen payment provider(s), including Stripe and, where offered, Klarna.
Payment providers process payment information in accordance with their own privacy policies and security requirements.
Horizon Clinical Group does not require or intend to store your full payment card details within its clinical records.
Website provider
Our website is hosted and operated using Squarespace. Squarespace may process information necessary to provide website hosting, security, functionality and any website services that we have enabled.
Clinical and administrative systems
We use secure third-party systems where necessary to support clinical administration, appointment management, communications, clinical documentation and related services.
Where third-party providers process personal information on our behalf, we will take appropriate steps to ensure that suitable contractual, security and data protection arrangements are in place.
Legal, regulatory or emergency disclosures
We may disclose information where required by law, regulation, court order or other lawful authority, or where necessary to respond to a serious emergency or safeguarding concern.
8. INTERNATIONAL DATA TRANSFERS
Some third-party technology and service providers used by Horizon Clinical Group may process or store information outside the UK.
Where personal information is transferred outside the UK, we will take appropriate steps to ensure that the transfer is made in accordance with applicable UK data protection requirements and that appropriate safeguards are in place where required.
The location and processing arrangements of third-party providers may change over time. We will seek to maintain appropriate safeguards for any international transfers.
9. HOW WE STORE AND PROTECT YOUR INFORMATION
We take appropriate technical and organisational measures to protect personal information against unauthorised access, loss, misuse, alteration or disclosure.
Clinical information will be stored within appropriate secure systems used for the delivery and administration of our services.
We do not routinely store clinical records on personal devices.
Where information is accessed or transmitted electronically, we use appropriate security measures and secure systems designed to protect confidential information.
No electronic system can be guaranteed to be completely secure. However, we take reasonable and proportionate steps to protect the information we hold.
10. HOW LONG WE KEEP YOUR INFORMATION
We retain personal information only for as long as it is necessary for the purposes for which it was collected, including to meet legal, regulatory, professional, accounting and clinical record-keeping requirements.
Clinical records may need to be retained for a longer period than ordinary administrative information.
Our retention periods are informed by applicable UK data protection requirements, professional obligations and relevant health and social care records-management guidance.
When information is no longer required, it will be securely deleted, destroyed or otherwise disposed of in an appropriate manner.
11. YOUR DATA PROTECTION RIGHTS
Depending on the circumstances and applicable legal exemptions, you may have rights under UK data protection law, including:
The right to be informed about how your information is used
The right to access personal information we hold about you
The right to request correction of inaccurate or incomplete information
The right to request restriction of processing in certain circumstances
The right to object to certain processing
The right to request erasure in certain circumstances
The right to data portability in certain circumstances
Rights relating to automated decision-making and profiling, where applicable
These rights are not absolute and may be subject to legal or regulatory exemptions.
If you wish to exercise a data protection right, please contact:
info@horizonclinicalgroup.co.uk
We may need to verify your identity before responding to a request.
12. COOKIES AND WEBSITE TECHNOLOGIES
Our website uses cookies and similar technologies that may be necessary for website functionality, security and, where enabled, analytics or other website services.
Because our website is operated using Squarespace, Squarespace may place certain cookies or collect certain visitor information in connection with the operation of the website.
Where non-essential cookies require consent under applicable law, we will provide an appropriate cookie consent mechanism.
You can manage cookie preferences through the cookie controls provided on our website where available.
We will maintain our Cookie Policy to reflect the cookies and technologies actually used by our website.
For further information, please see our Cookie Policy.
Squarespace provides tools that allow website owners to configure cookie consent and disable certain analytics-related cookies or visitor information features. (Squarespace Support)
13. CHANGES TO THIS PRIVACY POLICY
We may update this Privacy Policy from time to time to reflect changes to our services, technology, legal requirements or data-processing arrangements.
The latest version will be published on our website with the date it was last updated.
We recommend reviewing this page periodically.
14. CONTACTING US
If you have questions about this Privacy Policy, how your information is handled, or wish to exercise your data protection rights, please contact:
Horizon Clinical Group Ltd Email: info@horizonclinicalgroup.co.uk
15. MAKING A COMPLAINT
If you have concerns about how we have handled your personal information, please contact us first so that we can try to resolve your concerns.
You also have the right to complain to the Information Commissioner’s Office (ICO) if you believe your personal information has been handled unlawfully.
Information about making a complaint is available from the ICO.
Information Commissioner’s Office Wycliffe House Water Lane Wilmslow Cheshire SK9 5AF
Telephone: 0303 123 1113
Website: https://ico.org.uk/
Nothing in this Privacy Policy affects your statutory rights.
Horizon Clinical Group Ltd Privacy Policy – Last Updated: September 2026