1.Dr Gabrielle Gregory, Forensic Psychologist provides expert witness services based at The Granary, Grange Lane, Lower Broadheath. This privacy notice provides ​information about the personal information we process about you as a data controller, in compliance with the General Data Protection Regulation (GDPR).

2.Our ICO registration number is ZA032331

3.Our Data Protection point of contact is Carla Coles, Office Manager. Please contact Carla Coles at info@gpslimited.org with any questions or requests about the personal information we process.

Your rights

4.We are committed to protecting your rights to privacy. They include:

Your right of access - You have the right to ask us for copies of your personal information.

Your right to rectification - You have the right to ask us to rectify personal information you think is inaccurate. You also have the right to ask us to complete information you think is incomplete.

Your right to erasure - You have the right to ask us to erase your personal information in certain circumstances.

Your right to restriction of processing - You have the right to ask us to restrict the processing of your personal information in certain circumstances.

Your right to object to processing - You have the the right to object to the processing of your personal information in certain circumstances.

Your right to data portability - You have the right to ask that we transfer the personal information you gave us to another organisation, or to you, in certain circumstances.

You are not required to pay any charge for exercising your rights. If you make a request, we have one month to respond to you.

Please contact us at info@gpslimited.org, or The Granary, Grange Lane, Lower Broadheath, Worcester, WR2 6RW or 01905 797139 if you wish to make a request.

The personal data we process, why we process it, where it comes from and the legal basis for doing so

Legal cases

5.We process the personal data of individuals who are obtaining legal advice or are engaged in a legal dispute, and also the personal data of witnesses and others with links to the issues in the case.

6.The personal data may include:

•Names, contact details and dates of birth;

•Health information;

•Information about race, ethnic origin and sex;

7.The personal data are generally provided by the person instructing us in relation to the legal issues, who is usually a solicitor.

8.We process the data because it is in our legitimate interests as an expert witness to do so. We need to see and analyse documents containing this information in order to provide our expert advice.

9.In relation to any special category personal data, such as health records or information concerning, race, ethnic origin, or sex is, we rely on the legal claims basis for processing this data, in addition to our legitimate interest.

10.In many cases, an individual has consented to the transfer of their personal data to us. If he or she wished to withdraw their data, they must approach the leading solicitor of the case.

Other personal data

11.We also process personal data pursuant to our legitimate interests in running our business such as:

•Invoices and receipts;

•Accounts, VAT and tax returns;

•Insurance policies and related documents;

12.As an employer, we process personal data further to contracts of employment with our employees. The information includes:

•Names, addresses and contact details;

•Pay and bank details, pay slips;

•Curricula vitae, contracts of employment, references and appraisals;

•Health information (in reliance on the occupational health exemption contained in the Data Protection Act 2018)

Retention period

14.Personal data in legal cases is retained, where necessary, for six years in compliance with our professional indemnity obligations. Where this is not necessary, it is destroyed on the conclusion of the case.

15.Administrative data is retained for up to six years as necessary, in the unlikely event there are queries from HMRC and the VAT commissioner. Where it is not necessary to retain the data for six years, it is destroyed as soon as possible.

16.Personal data relating to employees who have left our employment is also retained for up to six years as necessary. This is the time limit for bringing a breach of contract claim. In some case we destroy it as soon as the employee leaves.

Whom do we share personal data with?

17.We share personal data internally strictly on a need to know basis.

18.Special category data and personnel files held electronically are encrypted with restricted access. Hard copy special category and other personal data is stored securely with restricted access.

19.We do not share personal data with anyone external to the organisation, other than with:

•Those who have instructed us as an expert witness

•HMRC and the VAT Commissioner as they require

•With others pursuant to a court order

How to complain

20.If you have any concerns about our use of your personal information, you can make a complaint to us at info@gpslimited.org, or by post to The Granary, Grange Lane, Lower Broadheath, Worcester, WR2 6RW or via telephone on 01905 797139.

21.You can also complain to the ICO if you are unhappy with how we have used your data. The ICO’s address:

Information Commissioner’s Office

Wycliffe House

Water Lane

Wilmslow

Cheshire

SK9 5AF

Helpline number: 0303 123 1113

ICO website: https://www.ic o.org.uk