Privacy Policy

1. Introduction

Last updated: 23 October 2026

Aurora Psychological Therapies Limited is committed to protecting your privacy and handling your personal information securely, lawfully and transparently.

This Privacy Policy explains how we collect, use, store and protect personal information when you visit our website, contact us about our services or receive psychological, neuropsychological or related professional services from Dr Silva.

As part of providing these services, we may process sensitive personal information, including information about your physical or mental health. We recognise the importance of maintaining confidentiality and protecting the information entrusted to us.

We process personal information in accordance with applicable UK data protection legislation, including the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018, as amended.

This policy also explains your rights regarding your personal information and how you can contact us if you have any questions or concerns about how your information is handled.

2. Who We Are and Who Is Responsible for Your Information

This website is operated by Aurora Psychological Therapies Limited, a limited company registered in England and Wales under company number 12498709.

Registered office: 15 Simpson Road, Basingstoke, England, RG21 6AR.

ICO registration number: ZC282219

For the purposes of UK data protection legislation, Aurora Psychological Therapies Limited is the data controller for personal information processed in connection with its independent practice, where it determines the purposes and means of that processing.

This means that we are responsible for ensuring that personal information is handled lawfully, securely and appropriately.

If you have any questions about this Privacy Policy, how your personal information is used or wish to exercise your data protection rights, please contact us using the following details:

Email: info@drdanielsilva.com

Postal address: 15 Simpson Road, Basingstoke, England, RG21 6AR.

We will respond to data protection enquiries and requests in accordance with applicable legal requirements.

3. What Information We Collect and How We Use It

We collect and process personal information where necessary to respond to enquiries, arrange appointments, provide clinical services and meet our legal and professional responsibilities.

3.1 Information We Collect

Depending on the services provided, we may collect:

Personal and contact details: Name, date of birth, address, telephone number and email address.
Enquiry and referral information: Details provided through our website, by email or telephone, or by referring professionals.
Clinical and health information: Relevant medical and psychological history, diagnoses, medication, assessment results, clinical notes, treatment plans and reports.
Administrative and financial information: Appointment records, correspondence, invoices, payments and relevant insurance details.
Website information: Technical information such as IP addresses, device details and cookie preferences, depending on the website technologies in use.

We may also receive relevant information from healthcare professionals, family members or other authorised individuals where appropriate.

3.2 How We Use Your Information

We use personal information to:

Respond to enquiries and arrange appointments.
Provide psychological therapy, neuropsychological assessments and related clinical services.
Maintain appropriate clinical and administrative records.
Communicate with relevant professionals where necessary and permitted.
Manage payments, invoices and insurance arrangements.
Meet legal, professional and safeguarding responsibilities.
Maintain the security and functionality of our website.

3.3 Our Lawful Bases for Processing

Under the UK General Data Protection Regulation (UK GDPR), we must have a lawful basis for processing personal information.

Depending on the purpose, these may include:

Contract (Article 6(1)(b)): Where processing is necessary to provide agreed services or take steps towards arranging them.
Legal obligation (Article 6(1)(c)): Where information must be processed to comply with applicable legal requirements.
Legitimate interests (Article 6(1)(f)): Where processing is necessary for appropriate practice administration or other legitimate purposes, provided these interests do not override your rights and freedoms.
Consent (Article 6(1)(a)): Where we specifically ask for your consent for an activity that relies on this lawful basis.

Health information is classified as special category personal data and requires additional protection.

Where the relevant legal requirements are met, we process this information under Article 9(2)(h) UK GDPR, which permits processing necessary for health or social care purposes, together with the applicable provisions of the Data Protection Act 2018.

Other lawful bases and special category conditions may apply in particular circumstances, including safeguarding matters or legal claims.

Consent to clinical assessment or treatment is separate from consent used as a lawful basis under data protection legislation.

We do not use personal information for unrelated purposes without an appropriate lawful basis.

4. Confidentiality and Information Sharing

We respect your privacy and treat personal and clinical information confidentially. We do not sell your personal information or share it with third parties for their own marketing purposes.

Information is only shared where necessary, lawful and consistent with our professional confidentiality obligations.

Depending on the services provided, information may be shared with:

Administrative support: Authorised personnel, including Dr Silva's Personal Assistant, who assist with enquiries, appointments, correspondence and practice administration.
Healthcare professionals: GPs, consultants, referring clinicians or other professionals involved in your care, where appropriate and permitted.
Clinical supervisors: Appropriately qualified professionals who support safe and effective clinical practice. Information is anonymised or minimised wherever reasonably possible.
Service providers: Organisations providing website hosting, email, practice management, secure recordkeeping, payment processing or IT support, subject to appropriate data protection arrangements.
Insurers and professional referrers: Private medical insurers, solicitors, case managers or other authorised organisations where necessary for agreed services, referrals or reports.

We may also disclose information where required or permitted by law, including in connection with safeguarding concerns, serious risks to safety, legal proceedings or regulatory obligations.

Where appropriate, we will explain relevant information-sharing arrangements and seek your agreement before sharing confidential clinical information.

Access to personal information is restricted to those who need it for legitimate clinical or administrative purposes.

5: Data Security and Retention

We take appropriate technical and organisational measures to protect personal information against unauthorised access, loss, misuse or disclosure.

5.1 How We Protect Your Information

Personal and clinical information may be held in electronic systems, correspondence and, where necessary, paper records.

Access is restricted to authorised individuals who require the information for legitimate clinical or administrative purposes. We use appropriate safeguards to protect confidential information and take reasonable steps to ensure that third-party service providers handle personal data securely.

Information submitted through our website's Contact & Enquiries form is processed using Wix and associated communication systems. We recommend that you avoid including unnecessary sensitive medical information in your initial enquiry.

Although we take appropriate precautions, no method of electronic communication or internet-based storage can be guaranteed to be entirely secure.

Where a personal data breach occurs, we will assess the risks and notify the Information Commissioner's Office (ICO) and affected individuals where legally required.

5.2 How Long We Keep Your Information

We retain personal information only for as long as necessary to provide our services and meet applicable legal, clinical and professional obligations.

Clinical records: Retained in accordance with applicable professional guidance and our clinical records retention arrangements. Different periods may apply depending on the client's age, the type of service and any relevant legal requirements.
Website enquiries and correspondence: Retained for as long as reasonably necessary to respond to enquiries and manage any resulting professional arrangements.
Financial records: Retained for the periods required by applicable accounting and tax legislation.

Where an enquiry leads to clinical services, relevant correspondence may become part of the client's clinical or administrative record.

Information that is no longer required will be securely deleted, destroyed or anonymised, unless continued retention is necessary for a lawful purpose.

6. Your Data Protection Rights, Cookies and Contact Information

6.1 Your Data Protection Rights

Under UK data protection legislation, you have certain rights regarding your personal information. Depending on the circumstances, these include the right to:

Request access to the personal information we hold about you.
Ask us to correct inaccurate or incomplete information.
Request the deletion of personal information where applicable.
Request restrictions on how your information is processed.
Object to certain types of processing.
Request the transfer of your information to another organisation where the right to data portability applies.
Withdraw consent where processing relies on your consent.

These rights are not absolute, and certain legal or professional obligations may require us to retain information.

To exercise your rights, please contact us using the details provided in Section 2. We will normally respond within one calendar month, subject to applicable legal provisions.

6.2 Cookies and Website Technologies

Our website is hosted on Wix and may use cookies and similar technologies to support essential website functions, maintain security and understand how visitors interact with the site.

Where consent is legally required for non-essential cookies or similar technologies, these will only be used in accordance with applicable consent requirements.

Further information about the cookies used and how you can manage your preferences is available in our Cookie Policy.

6.3 International Data Transfers

Some of the external services used to operate our website or support the practice may involve processing personal information outside the United Kingdom.

Where personal information is transferred internationally, we will ensure that an appropriate legal basis and any required safeguards are in place in accordance with UK data protection legislation.

6.4 Complaints and Contact Information

If you have any questions or concerns about how your personal information is handled, please contact us using the details provided in Section 2.

You also have the right to raise a complaint with the Information Commissioner's Office (ICO), the UK's independent data protection regulator.

Information Commissioner's Office

Website: https://ico.org.uk

Telephone: 0303 123 1113

You may also contact the ICO if you are dissatisfied with how we have responded to a data protection concern.

6.5 Changes to This Privacy Policy

We may update this Privacy Policy to reflect changes in legislation, professional requirements or the way we provide our services.

The latest version will be published on this website, with the date of the most recent update shown at the beginning of the policy.