Senior psychological consultancy for complex people and high-pressure organisations.
Senior psychological consultancy for complex people and high-pressure organisations.
Effective date: 6 April 2026
Last updated: 30 August 2026
Mycore Psychological Consulting Ltd (“Mycore”, “we”, “us”, “our”) is committed to protecting your privacy and handling personal information with care, discretion and appropriate professional safeguards.
This policy explains how we collect, use, store and protect personal data when you visit our website, contact us or engage with our psychological, consultancy, training or related professional services.
We process personal data in accordance with applicable UK data protection law, including the UK General Data Protection Regulation (“UK GDPR”) and the Data Protection Act 2018.
1. Who we are
Data Controller: Mycore Psychological Consulting Ltd
Company number: 16994380
Registered office: 128 City Road, London, EC1V 2NX
Email: enquiry@mycoreconsulting.co.uk
Telephone: 0333 200 1815
Mycore Psychological Consulting Ltd is responsible for deciding how and why personal data covered by this policy is processed.
2. What information we collect
The information we collect depends on how you interact with us.
It may include:
Where you engage with psychological services, we may also process special category data, including information concerning physical or psychological health and other sensitive personal circumstances relevant to the work.
We only process this information where an appropriate lawful basis and, where required, an additional special-category condition applies.
3. How we use your information
We may use personal information to:
We do not sell your personal data.
4. Our lawful bases
Depending on the circumstances, we may rely upon:
Contract — where processing is necessary to take steps at your request before entering into an agreement or to provide agreed services.
Legitimate interests — where processing is reasonably necessary to operate a safe, effective and professionally responsible practice and those interests are not overridden by your rights.
Legal obligation — where processing is required to meet applicable legal or regulatory responsibilities.
Vital interests — in limited circumstances where processing is necessary to protect someone's life.
Consent — where consent is the appropriate lawful basis, including certain optional communications.
Where health or other special-category information is processed, an appropriate condition under Article 9 UK GDPR and the Data Protection Act 2018 will also apply.
5. Confidentiality
Psychological and professional work is treated confidentially and with discretion.
There are circumstances in which information may need to be disclosed, including where there are significant safeguarding concerns, serious risk of harm, legal requirements or other professional obligations.
Where disclosure is necessary, we seek to share only information that is relevant and proportionate.
6. Psychological formulation and NSCTA™
Where appropriate, information provided during psychological work may contribute to a psychological formulation: a structured professional understanding of the factors that may be influencing a person's experience.
Mycore may use NSCTA™ — Neuro-Somatic Capacity–Threat–Agency, a developing research-informed formulation framework created by Rebecca Downes.
NSCTA™ may be used to organise relevant biological, psychological and contextual information through the Capacity–Threat–Agency model, helping to inform professional reasoning, pacing and consideration of what may be appropriate next.
NSCTA™ is not a diagnosis, psychometric test or automated decision-making system. Its use does not replace medical, psychiatric or other specialist assessment where this is indicated.
Personal client information will not be published or used in identifiable form for research, teaching, promotion or development of NSCTA™ without an appropriate lawful basis and, where required, specific permission.
7. Digital and AI-assisted systems
We may use secure digital systems to support appointment management, clinical records, documentation and administration.
Where appropriate, this may include AI-assisted transcription or documentation technologies.
These systems are intended to support rather than replace professional judgement.
Where such technology is used, we take reasonable steps to consider privacy, confidentiality, data security and the amount of information necessary for the particular purpose.
We do not use solely automated decision-making to determine psychological diagnoses, treatment suitability or similarly significant clinical decisions.
8. Sharing your information
Information may be shared where necessary, proportionate and lawful, including with:
Third-party processors acting on our behalf are expected to handle information securely and in accordance with applicable data protection requirements.
9. Data security and international transfers
We use appropriate technical and organisational safeguards designed to protect personal information against unauthorised access, disclosure, loss or misuse.
Where third-party providers process personal information outside the UK, appropriate legal safeguards will be used where required.
No electronic transmission or storage system can be guaranteed to be completely secure.
10. How long we retain information
We retain personal data only for as long as reasonably necessary for the purpose for which it was collected and to meet relevant clinical, professional, insurance, safeguarding, taxation and legal requirements.
Adult clinical records are generally retained for at least seven years after services end.
Different retention periods may apply where required by law, professional obligations, safeguarding considerations, insurance requirements or the circumstances of an individual case.
Information that is no longer required will be securely deleted or destroyed.
11. Your rights
Depending on the circumstances, data protection law may give you the right to:
These rights are subject to applicable legal limitations and exemptions, including those relevant to professional and clinical records.
12. Cookies and analytics
Our website may use cookies and similar technologies for essential functionality, security, analytics and improving website performance.
Where consent is legally required for non-essential cookies, appropriate consent controls should be provided.
You can also manage cookies through your browser settings.
13. External websites
Our website may contain links to academic research, professional organisations and other external websites.
Mycore does not control those websites and is not responsible for their content, security or privacy practices.
14. Complaints
If you have concerns about how your personal information has been handled, please contact us in the first instance.
You also have the right to complain to the Information Commissioner's Office.
Information Commissioner's Office
15. Changes to this policy
We may update this policy to reflect changes in law, professional guidance, technology or the way our services operate.
© 2026 Mycore Psychological Consulting Ltd. All rights reserved. | Privacy & Data Protection | Legal & IP