Privacy Policy

Last updated: 4 December 2025

1. Introduction

This Privacy Policy explains how I, Dr Erica Eassom, Chartered Psychologist and Expert Witness, collect, use, store and protect personal data provided through this website.

I am committed to safeguarding the privacy and confidentiality of all individuals whose data I hold, in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

This policy applies to:

Visitors to this website
Individuals making enquiries through the contact form
Professionals providing instruction or requesting availability

It does not apply to psychotherapy enquiries, which are managed separately by the Harrison Practice Group.

2. Data Controller

The data controller is:

Dr Erica Eassom
Chartered Psychologist & Expert Witness
Email: info@drericaeassom.com

3. What Personal Data I Collect

If you use the contact form on this website, I may collect:

Name
Email address
Organisation / solicitor firm (optional)
Details of your enquiry, which may include special category data depending on the context provided (for example, mental health, trauma history, or family circumstances)

I strongly request that you do not upload or send court bundles, medical records, or sensitive documents via the form. Secure transfer methods will be provided upon instruction.

4. How Personal Data Is Collected

a) Directly from you

When you submit an enquiry via the contact form or email, you provide personal data directly.

b) Through my form provider (Formspree)

The website contact form is processed by Formspree, a secure third-party provider acting as a data processor on my behalf. Formspree processes and transmits your enquiry to my email address. Formspree’s own privacy policy applies to their handling of form submissions until they are received by me.

5. Lawful Basis for Processing

Under UK GDPR, my lawful bases for processing personal data are:

a) Legitimate Interests

To respond to professional enquiries, assess availability, and decide whether I can accept instruction.

b) Contract / Pre-contractual Steps

Where personal information is necessary to begin discussions regarding possible instruction for expert witness services.

c) Legal Obligation

Where I am required to store or disclose information in accordance with court directions or regulatory requirements.

Special Category Data

If you provide information relating to mental health or other special category data, I process this under:

UK GDPR Article 9(2)(f) – processing necessary for the establishment, exercise or defence of legal claims
UK GDPR Article 9(2)(h) – health data processed by a healthcare professional bound by professional confidentiality

6. How Your Data Is Used

I may use your personal data to:

Respond to your enquiry
Determine whether I can accept instruction
Request further information if needed
Maintain administrative and legal records
Manage communication with legal professionals

I do not use your data for marketing or analytics. I do not sell or transfer your data to third parties for any commercial purpose.

7. Sharing of Personal Data

Your data may be shared only in the following circumstances:

With Formspree (as a data processor) for form submission
With legal representatives as part of the instruction process
Where legally required by a court or regulatory body
With secure document-transfer providers when exchanging bundles

I do not routinely transfer data outside the UK.

8. Data Storage and Retention

Personal data is stored securely in encrypted email storage and/or secure document systems with appropriate access controls.

Retention periods are as follows:

Initial enquiries not leading to instruction: normally deleted within 3 months
Records relating to accepted instructions: retained in accordance with legal and professional requirements (typically 6–7 years)
Financial records: retained for HMRC compliance (usually 6 years)

If you request deletion of your data, this will be honoured where possible unless legal or professional obligations require retention.

9. Your Rights Under UK GDPR

You have the following rights in relation to your personal data:

The right to request access to the data I hold about you
The right to request correction of inaccurate or incomplete data
The right to request deletion of your data, where legally possible
The right to request restriction of processing in certain circumstances
The right to object to processing where “legitimate interests” is the lawful basis, depending on your situation
The right to lodge a complaint with the Information Commissioner’s Office (ICO)

If you wish to exercise any of these rights, please contact: info@drericaeassom.com.

10. Security

I take data security seriously and use appropriate technical and organisational measures, such as encrypted email, secure document transfer, password protection, and restricted access to records.

No method of transmission over the internet is completely risk-free, but reasonable steps are taken to protect your data.

11. Cookies and Tracking

This website does not use cookies, analytics tools, or tracking scripts. As such, a cookie banner is not required.

If this changes in future, this Privacy Policy will be updated to reflect any use of cookies or analytics.

12. Links to External Websites

This website may contain links to external websites, such as the Harrison Practice Group. I am not responsible for the privacy practices or content of those external sites. You are encouraged to review their privacy notices separately.

13. Changes to This Policy

This Privacy Policy may be updated from time to time to reflect legal or operational changes. The most recent version will always be available on this website, with the “Last updated” date shown at the top.

If you have any questions about this Privacy Policy or how your data is handled, please contact info@drericaeassom.com.