Privacy Notice
Brimstone Psychology Limited
Who we are
Brimstone Psychology Limited provides educational psychology services to children, young people, families, and organisations. This includes assessment, consultation, and intervention, as well as the delivery of programmes such as RESTA (Resilience Support Teaching Assistant) and RESTA Alternative Provision.
For the purposes of data protection law, Brimstone Psychology Limited acts as a Data Controller. Where services are commissioned by schools, Local Authorities, or other organisations, Brimstone Psychology Limited may also act as a Data Processor on behalf of the commissioning body. In these cases, the commissioning organisation remains the Data Controller and determines how your information is used. You should refer to their privacy notice for further information.
Contact details
Brimstone Psychology Limited
Email: info@brimstonepsychology.co.uk
RESTA
Email: Support@restasupport.co.uk
Data Protection Officer:
Amy Allen
Email: amy.allen@brimstonepsychology.co.uk
ICO Registration Number:
ZC086676
What information we collect
We may collect and process personal information relating to:
- Children and young people receiving support
- Parents or carers
- Professionals involved in supporting the child or young person
- Staff, associates, and stakeholders engaging with our services
This may include personal details such as names, dates of birth, and contact information, alongside educational, psychological, and support-related information. Where relevant, we may also process information relating to health, wellbeing, and safeguarding, which is classified as special category data.
Where we get information from
We obtain personal data from a range of sources, including:
- Directly from individuals, parents, or carers
- Schools, colleges, and educational settings
- Local Authorities
- Other professionals and services involved in supporting the individual
Why we collect this information
We use personal data to deliver our services effectively and safely. This includes:
- Understanding individual needs
- Planning and delivering interventions
- Communicating with families and professionals
- Supporting safeguarding and well being
- Monitoring and improving our services
We also use information to meet our legal and professional responsibilities, including record keeping.
Lawful basis for processing
We process personal data where it is necessary for the delivery of educational and psychological services.
Depending on the context, this may include:
- Public task – providing educational psychology services
- Legal obligation – including safeguarding responsibilities
- Legitimate interests – service delivery and administration
- Vital interests – where there is a risk of harm
Where we process special category data (such as health or safeguarding information), we do so in line with legal requirements for the provision of health, education, and safeguarding support, including substantial public interest conditions.
Where required, consent will be sought, but this is not the primary basis for processing within our core service delivery.
RESTA services
RESTA (Resilience Support Teaching Assistant) is a programme delivered by Brimstone Psychology Limited. This includes training, support, and alternative provision services. Further information about RESTA can be found at: https://restasupport.co.uk/
In addition to the information outlined above, RESTA services may involve:
- Referral information from schools or Local Authorities
- Information relating to participation in programmes or alternative provision
- Behavioural, emotional, and educational support information
- Attendance, progress, and engagement records
This information is used to:
- Deliver RESTA programmes and alternative provision
- Monitor progress and outcomes
- Work collaboratively with schools, families, and professionals
- Support safeguarding and wellbeing
Where RESTA services are commissioned by a school or Local Authority, that organisation will usually be the Data Controller, and Brimstone Psychology Limited will act as a Data Processor. In these cases, the commissioning organisation determines how personal data is used.
Who we share information with
We may share information with relevant professionals and organisations involved in supporting the individual. This may include:
- Schools and colleges
- Local Authorities
- Health and other services.
Information is only shared where it is necessary, proportionate, and lawful to do so. Particular care is taken when handling sensitive or safeguarding-related information.
How we store your information
Personal data is stored securely using approved digital systems and, where necessary, limited physical records.
We take appropriate technical and organisational measures to protect information, including:
- Restricted access controls
- Secure storage systems
- Clear data handling procedures
Our IT systems are supported by Corbel IT, who provide technical and cyber security support to help ensure that data remains secure.
International data transfers
We do not routinely transfer personal data outside of the UK. Where this becomes necessary, we ensure appropriate safeguards are in place in accordance with data protection law.
How long we keep your information
We retain personal data in line with legal, safeguarding, and professional requirements.
In most cases, records relating to children and young people are retained until the individual’s date of birth plus 25 years. This reflects safeguarding responsibilities and professional record-keeping standards within psychological services.
After this point, information is securely deleted or destroyed.
Your rights
Under data protection law, individuals have rights in relation to their personal data. These include the right to:
- Request access to the information we hold about you
- Request correction of inaccurate or incomplete data
- Request erasure of data in certain circumstances
- Request restriction of processing
- Object to processing where applicable
- Request transfer of data (data portability)
- Withdraw consent where processing is based on consent
- Lodge a complaint with the Information Commissioner’s Office
Requests should be made to the Data Protection Officer:
amy.allen@brimstonepsychology.co.uk
Automated decision-making
We do not use automated decision-making or profiling in relation to personal data.
Data breaches
We have procedures in place to identify, manage, and respond to data breaches. Where required, breaches are reported to the Information Commissioner’s Office in line with legal requirements.
Concerns
If you have any concerns about how your personal data is handled, you can contact the Data Protection Officer.
You also have the right to raise concerns with the Information Commissioner’s Office:
https://ico.org.uk