Legal
Privacy Policy
Last updated: June 2026
Who we are
Psychiatric Report Ltd ("Distinct", "we", "us", "our") is a private healthcare provider registered in England and Wales (Company No. 08220578). You can contact us at Fairgate House, 205 Kings Road, Office F04f, Birmingham, B11 2AA.
We are registered with the Information Commissioner's Office (ICO) as a data controller under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
Questions about how we handle your data can be directed to us at info@distinct.health.
What data we collect
When you use our website or book an assessment, we may collect: your name, email address, phone number, and date of birth; health information including medical history, current medications, and responses to our pre-assessment questionnaires; payment information (processed via Stripe — we do not store card details); and technical data such as your IP address, browser type, and pages visited.
We only collect information that is necessary for the service you have requested.
How we use your data
We use your personal data to process your booking and deliver your assessment; communicate with you about your appointment and report; process payment; comply with our legal and regulatory obligations; and improve the quality and safety of our services.
We process your data on the following legal bases: performance of a contract (your booking); compliance with a legal obligation; and your explicit consent, which is required for special category health data under UK GDPR Article 9(2)(h).
Your health data
Your health information is special category data under UK GDPR. We process it solely to provide your diagnostic assessment, under Article 9(2)(h) and your explicit consent provided at the time of booking.
Your clinical records are held securely in Carepatron, our clinical management platform, with access restricted to your assessing clinician and administrative staff on a strict need-to-know basis. We never use your health data for marketing.
Third parties and data sharing
We do not sell your personal data. We share data only with the following parties, each under appropriate data processing agreements:
Care Patron Limited (trading as Carepatron) — our clinical platform, which processes appointment data, pre-assessment questionnaire responses, and clinical documentation on our behalf under a data processing agreement. Care Patron Limited is based in New Zealand. Data transferred to Carepatron is protected under their GDPR compliance framework and SOC 2 certification, which ensures your data is handled to an equivalent standard of protection.
Stripe — our payment processor. Payment card data is handled entirely by Stripe and is not stored by us.
Google — we use Google Analytics 4 and Google Signals to understand how our website is used. Google Signals enables cross-device analytics and links data to signed-in Google users where they have consented to ad personalisation. This data is processed in accordance with Google's privacy policy.
Meta — we use Meta Pixel to measure the effectiveness of our advertising and to enable retargeting to users who have visited our site. This is only activated with your cookie consent.
We may also share data where required by law, regulation, or court order.
Sharing your report
Your diagnostic report will not be shared with any third party — including your GP — without your explicit written consent. If you ask us to share it, we will do so securely.
Distinct is a diagnosis-only service. We do not prescribe medication or provide ongoing clinical management.
Data retention
We retain clinical records for a minimum of 8 years following your last assessment, in line with NHS record-keeping guidelines for private providers. Financial records are kept for 7 years as required by HMRC.
If you enquire but do not book, we will delete your contact details within 12 months. You may request earlier deletion subject to our legal obligations.
Cookies and tracking
Our website uses essential cookies necessary for the site to function. Analytics cookies (Google Analytics 4) and advertising cookies (Meta Pixel) are only placed if you accept them via our cookie consent banner.
Google Signals is enabled on our site, which means Google may link analytics data to your Google account if you are signed in and have consented to ad personalisation in your Google account settings.
You can manage or withdraw your cookie consent at any time by using our cookie consent banner, which reappears if you clear your browser cookies.
Your rights
Under UK GDPR you have the right to: access the personal data we hold about you; request correction of inaccurate data; request erasure of your data (subject to legal obligations); restrict or object to our processing; receive your data in a portable format; and withdraw consent at any time.
To exercise any of these rights, contact us at info@distinct.health. We will respond within one calendar month. You also have the right to complain to the ICO at ico.org.uk or on 0303 123 1113.
Changes to this policy
We update this policy when we change how we process data — for example when we add a new third-party tool or change our practices. The date at the top of this page reflects when it was last updated. We encourage you to check back periodically.