1. Who we are
Corban Psychology Ltd provides independent Educational Psychology consultation, assessment and advice to schools and multi-academy trusts.
Data controller: Corban Psychology Ltd
Email:
admin@corbanpsychology.com
Telephone:
07733 283325
Corban Psychology ordinarily acts as an independent data controller for professional records created as part of its work. The commissioning school remains responsible for the personal information it holds and for its own data-protection obligations.
2. Whose information we process
We may process personal information relating to:
- children and young people referred for Educational Psychology involvement;
- parents, carers and other family members;
- school and multi-academy trust staff; and
- other professionals involved with the child or young person.
3. Information we may collect
The information required will depend on the purpose of the work. It may include:
- names, dates of birth, contact details, school and year group;
- information about education, development, learning, communication and behaviour;
- health, disability, emotional wellbeing and family information where relevant;
- views provided by the child or young person, their family and school staff;
- assessment results, observations, work samples and professional notes;
- relevant reports and records supplied by the school or other professionals; and
- business correspondence and invoicing information.
Some of this is special category data, particularly information about health, disability, ethnicity or other sensitive matters.
4. Where information comes from
Information is usually supplied by the commissioning school and obtained through consultation with school staff, parents or carers and the child or young person. Relevant information may also be supplied by other professionals where it is appropriate and lawful to do so.
5. How and why we use information
Personal information may be used to:
- consider and respond to a school’s referral questions;
- plan and undertake Educational Psychology consultation and assessment;
- develop a psychological understanding of strengths and needs;
- prepare written advice and practical recommendations;
- communicate with the school, family and relevant professionals;
- maintain appropriate professional records;
- manage contracts, invoicing and business administration; and
- meet professional, safeguarding, insurance and legal responsibilities.
6. Lawful bases
Under Article 6 of the UK GDPR, the lawful bases used will depend on the information and purpose. They are principally:
- legitimate interests — providing requested professional Educational Psychology services, maintaining records and managing the practice;
- contract — arranging and delivering services commissioned by a school or multi-academy trust; and
- legal obligation — where information must be processed to meet a legal or regulatory requirement.
Where special category data is processed, an additional condition under Article 9 of the UK GDPR and the Data Protection Act 2018 is required. Depending on the circumstances, this may include the provision or management of health or social care by a professional subject to confidentiality, substantial public interest conditions such as safeguarding, or explicit consent where that is the appropriate condition.
Consent to a child or young person taking part in Educational Psychology work is an important professional and ethical requirement. However, consent to participate and the data-protection lawful basis are not necessarily the same thing.
7. Sharing information
Information and reports will normally be shared with the commissioning school and with parents or carers through the arrangements agreed for the work. Information may also be shared with:
- other professionals where this is agreed, necessary and lawful;
- professional advisers, insurers or regulators where required;
- law-enforcement or safeguarding bodies where there is a legal duty or serious concern; and
- trusted providers supporting secure email, storage, videoconferencing, IT, administration or hosting.
Service providers are permitted to use personal information only as necessary to provide their contracted services. Personal information is not sold and is not used for unrelated marketing.
8. International transfers
Some technology providers may process information outside the United Kingdom. Where this happens, Corban Psychology uses providers and safeguards intended to meet UK data-protection requirements, such as UK adequacy regulations or approved contractual safeguards.
9. Security
Appropriate technical and organisational measures are used to protect personal information. These include password-protected systems, access controls, secure information-sharing arrangements and confidential disposal. Access is limited to those who need the information for an authorised purpose.
10. How long information is kept
Personal information is retained only for as long as reasonably necessary for the purpose for which it was collected and to meet professional, safeguarding, insurance and legal responsibilities. Different types of record may therefore have different retention periods. Information is securely deleted or destroyed when it is no longer required. Further information about the retention schedule is available on request.
11. Your rights
Depending on the circumstances, individuals may have the right to:
- be informed about how their data is used;
- request access to their personal information;
- have inaccurate information corrected;
- request erasure in certain circumstances;
- request restriction of processing;
- object to processing based on legitimate interests;
- request data portability where applicable; and
- withdraw consent where consent is the lawful basis.
Your right to object: You may object to processing based on legitimate interests by contacting admin@corbanpsychology.com. The right is not absolute, and there may be compelling legitimate or legal reasons to continue processing particular information.
Requests will normally be answered within one month. Identity may need to be confirmed before information is released. Some rights are not absolute and may not apply in every situation.
12. Website information
This website does not use advertising cookies or sell visitor information. The web-hosting provider may process basic technical information, such as IP address, browser type, pages requested and the date and time of a visit, to operate and secure the website.
13. Questions and complaints
Questions, requests or concerns about personal information should be sent to admin@corbanpsychology.com.
You also have the right to complain to the Information Commissioner’s Office: ico.org.uk/make-a-complaint.
14. Changes to this notice
This notice may be updated when services, working practices or legal requirements change.
Last updated: 27 July 2026