Introduction
This Privacy Notice explains how Find A Way: Psychological Services CIC collects, uses, and protects your personal data when you contact us or use our services. It also outlines your rights under the Data Protection Act 2018 and the UK General Data Protection Regulation (UK GDPR).
For the purposes of these laws, Find A Way: Psychological Services CIC is the Data Controller. This means we are responsible for deciding how your personal data is used and why it is collected.
We are committed to respecting your privacy and handling your data fairly, lawfully, and transparently.
Who we are
Find A Way: Psychological Services CIC is a not-for-profit community interest company. We provide educational and child psychology support for families, schools and settings in Leeds and across Yorkshire: educational psychology assessments and reports, Video Interaction Guidance, and parenting support and advocacy.
Our registered office is our official company address. Our work with families takes place in Leeds and across Yorkshire.
- Registered office
- Suite A, 82 James Carter Road, Mildenhall, Bury St Edmunds, IP28 7DE
- sophia
@findaway .org - Company number
- 15992869
Purpose of this notice
The purpose of this Privacy Notice is to tell you:
- What personal data we collect about you and your child
- Why we collect it and how we use it
- Who we may share it with
- How we keep it safe
- What your rights are under data protection law
What information we collect
When you send an enquiry through this website, we receive:
- Your email address
- Your name, if you give it
- The topic you choose and your message, if you write one
When we work with you or your child, we may also collect the following information, depending on the support you have asked for:
- Basic contact details — name, phone number, email, address
- Demographic information — date of birth, gender
- Emergency contact details
- Relevant personal information — health and development needs, learning and education, family or support circumstances
- Information from your child’s school or setting and other professionals, with your agreement
- Safeguarding or risk-related information — where necessary to ensure safety
- Communication records — notes from sessions, emails, referrals and reports
We only collect what is necessary to provide our services safely, appropriately, and effectively.
How we use your information
We use your data to:
- Deliver our services and support to you
- Respond to enquiries and referrals
- Maintain accurate records of our work
- Safeguard children, young people, and adults at risk
- Comply with legal, contractual, and funder requirements
- Improve our services and monitor impact (using anonymised data for reporting)
Lawful basis for processing
We rely on different lawful bases depending on the situation. These include:
- Consent — where you have given clear permission
- Legal obligation — where we must comply with the law (e.g. safeguarding, data retention)
- Vital interests — to protect someone’s life or wellbeing
- Public task — where we deliver services in the public interest
- Legitimate interests — to run our services effectively (unless these are overridden by your rights)
Information about health, development or special educational needs is special category data, which the law protects more strictly. We use it only to provide the health and care support you have asked for, under professional confidentiality, or with your explicit consent.
Children’s information
When we work with a child, we usually collect information about them from their parents or carers, and from their school or setting with the parents’ or carers’ agreement. Parents and carers can usually exercise a young child’s data protection rights on their behalf. A child who is old enough to understand their rights can exercise them themselves.
Data security and storage
We take steps to protect your personal data:
- Electronic records are stored on secure, password-protected systems
- Paper records (if used) are kept in locked storage
- Access is restricted to those who need it
- Everyone who works with us is trained in data protection and safeguarding
- We keep your information only as long as necessary, in line with legal requirements and good practice. When no longer needed, your data is securely deleted or anonymised.
Your rights
Under the UK GDPR, you have the right to:
- Access the personal data we hold about you
- Request correction of inaccurate or incomplete data
- Request erasure of your data in certain circumstances
- Object to processing, or ask us to restrict how we use your data
- Withdraw consent at any time (if we are using consent as the basis)
- Complain to the Information Commissioner’s Office (ICO) if you are unhappy with how your data is handled.
To exercise your rights or ask questions, please contact us. We will respond within one month.
Changes to this notice
We will update this notice when we change how we use personal information. It was last updated on 2 November 2026.