TRC Privacy Notice

Last reviewed: 23 July 2026

About Us

The Recovery Centre Ltd (“The Recovery Centre”, “we”, “us” or “our”) is the data controller responsible for the personal information described in this Privacy Notice.

The Recovery Centre Ltd
75 Kinnerton Street
London
SW1X 8ED

Telephone: (+44) 20 7235 0080

Data Protection Lead: laura@trcgroup.org.uk

About this notice

Your privacy matters to us, and we are committed to handling your personal information fairly, lawfully and transparently.

This Privacy Notice explains what information we collect, why we use it, who we share it with, how long we keep it, and how we protect it. We never sell your personal information.

We may update this Privacy Notice from time to time to reflect changes to our services or the law. Please check the date at the top of this notice to see when it was last reviewed.

About The Recovery Centre

The Recovery Centre is a private mental health provider offering psychiatric consultations, neurodevelopmental assessments and therapy services for children, adolescents and adults across our London, Midlands, Edinburgh and Riyadh clinics.

Our London clinic is registered with the Care Quality Commission (CQC) for the regulated activities of treatment of disease, disorder or injury and diagnostic and screening procedures.

The information we collect

Depending on your relationship with us, we may collect personal information directly from you (for example, when you contact us through our website, make an enquiry, attend an assessment or receive treatment). We may also receive information from your GP, another healthcare professional involved in your care, a parent or guardian, or other organisations where appropriate and with a lawful basis for doing so. We may collect and process:

• Identity information – such as your name, date of birth and gender.
• Contact information – such as your address, email address and telephone number.
• Clinical information – including referral information, psychiatric and psychological assessments, therapy notes, treatment history, medication details and information relating to your care.
• Family information – where relevant to your care, including information about parents, guardians or other family members involved in treatment.
• Billing information – information required to administer invoices and payments. We do not store your full payment card details.
• Technical information – if you use our website, we may collect information such as your IP address, browser type and how you use our website.
• Safeguarding information – where relevant to protecting you or another person from harm.

As a healthcare provider, much of the information we hold is health information. Under UK GDPR this is known as special category data, which receives additional legal protection.

Our lawful basis for processing

Whenever we collect or use your personal information, we must have a lawful basis under UK GDPR. Because much of the information we hold is health information, we must also meet an additional condition for processing special category data.

Depending on the circumstances, we rely on:

• Performance of a contract – where processing is necessary to provide the assessment, treatment or services you have requested.
• Health or social care purposes (Article 9(2)(h) UK GDPR) – to assess, diagnose and provide healthcare under the responsibility of healthcare professionals who are subject to duties of confidentiality.
• Legal or regulatory obligations – for example, where we are required to provide information to regulators or other public authorities.
• Vital interests – where it is necessary to protect someone’s life or safety.
• Consent – where required for specific purposes, such as certain information sharing or marketing communications. Where we rely on your consent, you may withdraw it at any time.

How we use your information

We use your personal information to:

• provide assessments, diagnosis and treatment;
• communicate with you and, where appropriate, your GP or other healthcare professionals involved in your care;
• respond to enquiries made through our website, by telephone or by email;
• manage referrals and appointments;
• administer invoices and payments;
• comply with our legal and regulatory obligations; and
• improve and manage our services.

We may use approved artificial intelligence (AI) tools to assist with administrative tasks. Any AI-assisted output is reviewed by an appropriately qualified member of our team before it forms part of your record. Artificial intelligence is not used to make clinical decisions about your care and does not replace professional clinical judgement. We do not make decisions about you based solely on automated processing.

Marketing communications

If you choose to subscribe to our newsletter, we will use your name and email address to send you updates about The Recovery Centre and our services. We use Mailchimp to manage and send these communications on our behalf. You can unsubscribe at any time by clicking the unsubscribe link in our emails or by contacting us.

Keeping your information secure

We use appropriate technical and organisational measures to protect your personal information from unauthorised access, loss, misuse or disclosure. We also require anyone processing information on our behalf to maintain appropriate security and confidentiality standards. We have procedures in place to respond to suspected personal data breaches and will notify you and the Information Commissioner’s Office (ICO) where required by law.

Who we share your information with

We do not sell your personal information or share it for marketing purposes. We may share your personal information with:

• members of your clinical team, including psychiatrists, psychologists, therapists, nutritional therapists and other healthcare professionals involved in your care;
• regulatory bodies where we are required to do so by law or as part of our regulatory obligations;
• our professional advisers, insurers and auditors where necessary;
• law enforcement agencies or other public authorities where required by law or to protect someone’s safety; and
• trusted third-party providers supporting our clinical systems, secure communications, invoicing, payment processing and other business operations.

Where third-party providers process personal information on our behalf, they do so under appropriate contractual arrangements and only for authorised purposes.

International transfers

Some of our trusted service providers, including those supporting our business operations, may process personal information outside the UK. Where this happens, we ensure appropriate safeguards are in place to protect your personal information in accordance with UK data protection law.

How long we keep your information

How long we keep information depends on the type of information and the purpose for which it was collected. We take into account professional guidance on clinical record-keeping, our legal, regulatory and contractual obligations, and guidance from the Information Commissioner’s Office (ICO). When personal information is no longer required, we securely delete or anonymise it.

Your rights

Under UK data protection law, you have the right to:

• request access to the personal information we hold about you;
• request that inaccurate or incomplete personal information is corrected;
• request that your personal information is erased, where this right applies. Please note that we may not be able to erase information where we are required to retain it for legal, regulatory or professional reasons, including healthcare records;
• request that we restrict how we use your personal information in certain circumstances;
• object to certain types of processing;
• request the transfer of your personal information to another organisation, where applicable; and
• withdraw your consent where we rely on your consent to process your personal information.

These rights are not absolute and may not apply in every circumstance.

If you would like to exercise any of these rights, please contact our Data Protection Lead using the contact details above.

Cookies

Our website uses cookies to help it function effectively and improve your experience. Some cookies are essential for the operation of the website, while others help us understand how visitors use our website and improve our services.

Where required by law, we will ask for your consent before placing non-essential cookies on your device. You can accept or reject these cookies using our cookie banner and can change your preferences at any time.

You can also manage or delete cookies through your web browser settings. Please note that disabling certain cookies may affect how our website functions.

Concerns and complaints

If you have any questions or concerns about how we handle your personal information, please contact our Data Protection Lead in the first instance.

If you remain unhappy with how we have handled your personal information, you have the right to complain to the Information Commissioner’s Office (ICO).

Information Commissioner’s Office
Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF

Website: https://ico.org.uk