Privacy Policy – Rikta Coaching

Data Controller

Rikta Coaching provides neurodiversity support and clinical assessments. The person responsible for your data (Data Controller) is our Practice Manager, Philip Lindersten.

What we process

• Contact details: Name and email address for communication and follow-up.
• Health data (special category data): Health-related information you choose to share via a form or during a clinical interaction (e.g., neurodevelopmental information).
• Technical data: IP address and device information to ensure website functionality.

Systems we use

• Kaddio: Used to handle contact enquiries and, where relevant, clinical documentation. Health data is stored encrypted in accordance with healthcare data standards.
• Email: Used for follow-up and sending requested information. We do not send sensitive health results via standard unencrypted email.

Website operation & analytics

• Necessary cookies: Required for the self-test and secure login to function.
• Analytical cookies: Used to understand site traffic and improve our services. You can opt out of these via your browser settings.

Transfers outside the UK/EEA

We aim to process all data within the UK or the EEA. If a service provider stores data outside these zones, we ensure legal safeguards (such as Standard Contractual Clauses or UK Addendums) are in place to maintain your level of protection.

How long we keep data

• Self-tests: Self-test results are calculated locally and are not stored by us.
• Contact enquiries: Kept for up to 12 months for follow-up if you do not proceed.
• Clinical records: If you begin a clinical relationship, records are kept for a minimum of 8–10 years in accordance with UK private healthcare guidelines.
• Marketing: Email subscriptions are kept until you choose to unsubscribe.

Your rights

• Right of access: Request a copy of the personal data we hold about you.
• Right to rectification: Have incorrect data corrected.
• Right to erasure: Request deletion of data (note: clinical records are subject to statutory retention periods and may not be erasable immediately).
• Data portability: Receive your data in a machine-readable format.
• Right to complain: If you have concerns, you have the right to contact the Information Commissioner’s Office (ICO), the UK’s data protection authority.