Privacy Policy

Who I am and what services I provide

GBNeuro is a sole trader business operated by Dr Giulia Bellesi, a  Consultant Clinical Neuropsychologist registered with the Health and Care Professions Council (HCPC).
GBNeuro provides neuropsychological assessments, cognitive rehabilitation, and related clinical services both online and in person.

In this document, “I” or “my” refers to Dr Giulia Bellesi and GBNeuro as a sole trader. All services are provided in compliance with professional and legal standards for data protection and clinical confidentiality. 

Data Protection & Privacy

I am registered with the Information Commissioner’s Office (ICO) — the UK’s independent authority for data privacy and information rights.
I also comply with the UK General Data Protection Regulation (GDPR) and the Data Protection Act 2018.

This Privacy Policy explains how I collect, store, and use your personal information in accordance with these regulations.

Why your data is collected

Your personal information is collected and stored only where it is relevant to your assessment or treatment, and necessary to provide effective care.
This may include:

• Contact information (name, email, phone, address)

• Background information provided during assessment

• Clinical documentation

• Test results and treatment plans

I may also collect anonymised data for internal audits or service evaluation. If you prefer your anonymised data not to be used for these purposes, please let us know.

How your information is stored and protected

I take data protection seriously and use appropriate technical and organisational safeguards to keep your information safe.

Storage methods:

• Electronic records: Stored on encrypted, password-protected systems accessible only by Dr Giulia Bellesi.

• Paper records (if any): Kept in a locked cabinet in a secure location.

• Emails: Managed through the secure business account info@gbneuro.com.

• Video sessions: Conducted via encrypted and GDPR-compliant platforms such as Microsoft Teams

• Questionnaires: Stored securely and de-identified where possible.

Although no online system is 100% secure, I follow industry best practices to prevent unauthorised access, disclosure, alteration, or destruction of your data.

Confidentiality and information sharing

All information shared with GBNeuro is treated as strictly confidential. Your information will only be shared if:

• You give explicit consent

• Disclosure is required by law

• It is necessary to protect your life or prevent serious harm

• It is in the public interest, such as preventing a crime

I participate in regular professional supervision, as required by the HCPC and British Psychological Society (BPS). Clinical material may be discussed in supervision, but clients are never identified by name or by any information that could reveal their identity.  Supervisors are bound by the same confidentiality standards.

Data retention

Personal data that we process for any purpose or purposes shall not be kept for longer than is necessary for that purpose or those purposes. Enquiry data will be retained for up to 3 months, after which it is securely deleted or confidentially shredded. Client records are retained according to statutory guidance, which varies depending on the population group.
After the retention period, all records are securely destroyed.

Your rights

You have the right to:

• Access the data held about you

• Request corrections to inaccurate information

• Withdraw consent for processing (where applicable)

• Request deletion of your personal data (subject to legal obligations)

To exercise any of these rights, please contact us at info@gbneuro.com.
I will respond to all requests within 30 days.

Data breaches

In the unlikely event of a data breach, I will:

1. Notify the ICO within 72 hours.

2. Inform you promptly, explaining what happened and what actions were taken.

3. Take immediate steps to prevent recurrence.

I minimise this risk by double-checking email addresses, using encryption for sensitive data, and avoiding the inclusion of identifiable information in general correspondence.

Complaints

If you have concerns about how your information has been handled, please contact me first at info@gbneuro.com.
I aim to respond within 30 days.

If you remain dissatisfied, you may contact the Information Commissioner’s Office (ICO):  https://ico.org.uk/make-a-complaint/

You can also raise concerns about professional conduct with the Health & Care Professions Council (HCPC): https://www.hcpc-uk.org/concerns

Contact

If you would like to access, correct, or delete any personal information I may hold about you, or simply want more information, please contact: info@gbneuro.com

Changes to this policy

I reserve the right to amend this Privacy Policy at any time. Updates will take effect immediately upon posting on the website.

Last reviewed: October 2025