Last updated: 24 August 2026
1. About this Privacy Policy
This Privacy Policy explains how Neurodiverse Nurse collects, uses, stores and protects your personal information when you use the NDN Healthcare website or our healthcare services.
The NDN Healthcare website and ADHD medication service are operated by:
Mrs Donna Marie Carter
Sole trader trading as Neurodiverse Nurse
129 Roseneath Road
Urmston
Manchester
M41 5AY
Email: support@neurodiversenurse.co.uk
Telephone: 07982 774345
For the purposes of UK data protection law, Neurodiverse Nurse is responsible for determining how your personal information is used in connection with the healthcare services it provides.
2. Information We May Collect
Depending upon how you interact with us, we may collect and process information including:
- your name;
- date of birth;
- address;
- telephone number;
- email address;
- NHS number where required;
- GP and other healthcare-provider details;
- appointment and booking information;
- payment and transaction information;
- communications between you and Neurodiverse Nurse;
- information submitted when registering for our services;
- diagnostic reports and supporting documentation;
- information concerning your ADHD diagnosis;
- medical history;
- current and previous medication;
- allergies;
- physical-health information;
- blood pressure, pulse, height and weight where clinically required;
- information contained in medication and physical-health questionnaires;
- consultation and treatment records;
- prescriptions and prescribing information;
- correspondence with your GP, pharmacy or other healthcare professionals; and
- other information reasonably necessary to provide safe and appropriate healthcare.
Health information is treated as special category personal data and receives additional protection under UK data protection law.
3. How We Collect Your Information
We may obtain personal information:
- directly from you;
- through the NDN Healthcare website;
- through Semble or other secure clinical systems we use;
- during consultations;
- from diagnostic reports and medical documentation you provide;
- from your GP or another healthcare professional where appropriate and permitted;
- through pharmacies involved in dispensing your medication;
- through appointment and payment systems; and
- through communications with you by email, telephone or other agreed methods.
Clinical information should be provided through the secure systems specified by Neurodiverse Nurse wherever possible.
4. Semble and Clinical Information
Neurodiverse Nurse uses Semble as part of its clinical and administrative systems.
Semble may be used for purposes including:
- patient registration;
- collecting diagnostic documentation;
- clinical questionnaires;
- physical-health information;
- appointment booking;
- payments;
- patient communications; and
- management of clinical records.
The NDN Healthcare WordPress website is primarily used to provide information and direct patients into the appropriate secure clinical pathway.
Where you are asked to provide diagnostic reports, medical information or other sensitive clinical information, you should use the secure system provided rather than submitting detailed medical information through a general website enquiry or ordinary email unless specifically instructed otherwise.
5. Why We Use Your Information
We may use your personal information to:
- register you as a patient;
- review your existing ADHD diagnosis;
- determine whether our medication pathway may be clinically appropriate;
- arrange and manage appointments;
- provide consultations;
- make clinical and prescribing decisions;
- issue and manage prescriptions;
- monitor medication and treatment;
- communicate with you about your care;
- communicate with your GP, pharmacy or other healthcare professionals where appropriate;
- manage shared-care requests;
- process payments;
- maintain appropriate clinical records;
- meet professional, regulatory and legal requirements;
- manage complaints and enquiries;
- protect patients and maintain the safety and security of our services; and
- operate and improve our Website and services.
6. Our Lawful Basis for Processing
UK data protection law requires us to have an appropriate lawful basis for using personal information.
Depending upon the circumstances, our processing may be necessary for:
- taking steps at your request before providing healthcare services or performing our agreement with you;
- complying with legal and regulatory obligations;
- our legitimate interests in operating and administering our healthcare service, where those interests do not override your rights; and
- protecting vital interests in limited circumstances.
Health information is special category data. Where we process health information for the provision or management of healthcare, we will rely on an appropriate condition under Article 9 of the UK GDPR and applicable UK data protection legislation.
The ICO confirms that organisations processing health information need both an Article 6 lawful basis and an appropriate Article 9 special-category condition. Healthcare provision is one of the recognised Article 9 conditions where its requirements are satisfied.
Where consent is specifically required for a particular use of your information, we will request it separately.
7. Who We May Share Information With
Where necessary and appropriate, personal or clinical information may be shared with organisations or individuals involved in providing or supporting your care, which may include:
- your GP;
- pharmacies;
- other healthcare professionals involved in your care;
- clinical-system providers such as Semble;
- appointment, communication and payment providers;
- professional advisers;
- regulators or professional bodies where required;
- insurers where relevant; and
- public authorities or other organisations where disclosure is required or permitted by law.
We only share information where there is an appropriate reason for doing so and aim to limit disclosure to information necessary for that purpose.
8. Your GP and Shared Care
Where treatment becomes stable and shared care is considered clinically appropriate, Neurodiverse Nurse may communicate relevant information to your GP to request a shared-care arrangement.
This may include information about your diagnosis, medication, dose, treatment response, monitoring and ongoing treatment requirements.
Acceptance of shared care remains at the discretion of your GP or NHS healthcare provider.
9. Payments
Payments for appointments may be processed through third-party payment providers integrated with our booking or clinical systems.
We do not normally receive or store your complete payment-card details ourselves where payment is handled by an external payment processor.
The payment provider will process your information according to its own privacy and security arrangements.
10. How Long We Keep Your Information
We retain personal and clinical information only for as long as reasonably necessary for the purposes for which it was collected and to comply with applicable healthcare, professional, regulatory, insurance and legal record-keeping requirements.
Different categories of information may have different retention periods.
Clinical records may need to be retained for a significant period after your treatment has ended.
When information is no longer required, it will be securely deleted, destroyed or anonymised as appropriate.
The ICO specifically identifies appropriate retention, data minimisation and security as important considerations when processing special-category health information.
11. How We Protect Your Information
We take reasonable technical and organisational measures designed to protect personal information against:
- unauthorised access;
- accidental loss;
- inappropriate disclosure;
- alteration;
- destruction; and
- other unlawful processing.
Where appropriate, clinical information is managed through dedicated healthcare systems rather than being stored directly on the public-facing Website.
However, no internet-based service can guarantee absolute security.
12. Your Data Protection Rights
Depending upon the circumstances and the lawful basis being relied upon, you may have rights including:
- the right to be informed about how your information is used;
- the right of access to personal information held about you;
- the right to rectification of inaccurate information;
- the right to erasure in certain circumstances;
- the right to restrict processing in certain circumstances;
- the right to data portability where applicable;
- the right to object to certain processing; and
- rights relating to certain forms of automated decision-making.
These rights are not absolute. For example, healthcare providers may be required to retain clinical records even where a patient asks for information to be deleted.
To exercise your rights, contact:
support@neurodiversenurse.co.uk
13. Cookies and Website Analytics
The NDN Healthcare Website may use cookies and similar technologies required for the Website to function correctly.
We may also use analytics or other technologies to understand how visitors use the Website and improve our services.
Where legally required, non-essential cookies will only be used after you have been given an appropriate choice or provided consent.
Further information about cookies used by the Website should be provided through our cookie settings or Cookie Policy.
14. External Websites
Our Website may contain links to external websites or services, including Semble, pharmacies, booking/payment providers and the main Neurodiverse Nurse website.
We are not responsible for the privacy practices of websites operated independently by third parties.
You should review the privacy information provided by those organisations where appropriate.
15. Children’s Information
The ADHD medication pathway promoted through this Website is intended for people aged 18 or over.
The Website is not intended to collect clinical information from children through this medication pathway.
16. Changes to this Privacy Policy
We may update this Privacy Policy periodically to reflect changes in our services, systems, regulatory requirements or data-protection law.
The latest version will be published on the Website with the date it was last updated.
17. Complaints
If you have concerns about how your personal information has been handled, please contact Neurodiverse Nurse first so that we have an opportunity to investigate and respond.
You also have the right to complain to the Information Commissioner’s Office (ICO), the UK’s independent data-protection regulator.
Information Commissioner’s Office
18. Contact Us
For questions about this Privacy Policy or how your information is handled:
Neurodiverse Nurse
Mrs Donna Marie Carter
129 Roseneath Road
Urmston
Manchester
M41 5AY
Email: support@neurodiversenurse.co.uk
Telephone: 07982 774345