Privacy Policy

This Policy contains important information about how  (hereinafter referred to as “Website”) collects, uses, maintains, and discloses information that may be collected from you when you use, access, or avail our services through the Website.


By using the Website, you agree to abide by the following terms. If you do not wish to agree to any conditions below, kindly refrain from accessing the Website. The term “us”; “we” or “our” refers to Dr Abhishek Shastri trading as Cognivalue & his employees. The terms “you”; “your” refers to the prospective or intended Customer or patient or their representative or visitor(s) (hereinafter collectively referred to as “Customer”) to the Website or Customer making general enquires. Where a person is a representative on behalf of a Customer, they agree that they will be bound by this Policy, even if the Customer breaches, or is not bound by, any part of this Policy.

Information we may collect

  • We collect information only if you voluntarily submit such information to us, for example when you fill in our Contact Form and/or use the facilities available on the Website for corresponding with us by e-mail or phone or access or use any other interactive features of the Website. 

  • We may collect personal information that identifies you in a variety of ways, including, but not limited to your name, date of birth, email address, mailing address, phone number or demographic information such as postcode, Financial information, i.e. the credit/debit card, or banking details, with which you pay, Emergency contact details, i.e. next of kin, Consent to contact your next of kin, your GP and other relevant third parties, Private medical insurance details, and other personal information, results of laboratory tests, x-rays, etc,

  • Special categories of personal data: notes and reports containing information relating to your health and medical history as well as details about the treatment you receive, details of current and previous physical and mental health information, details of your nationality, race, and/or ethnicity, details of your religion, data concerning your sex life and/or sexual orientation.

Non-personally identifiable information

  • We may collect non-personal information about you whenever you access or interact with our Website or any of the Services. This includes but is not limited to browser name, version, the type of device used, server location, users’ operating system and version, your mobile device’s unique device ID, third-party apps or website or service that referred users to our Website, language preference, means of connection to our Website and Services users’ location information, Internet service providers, IP address, technical information and other similar information about users.


  • Whenever you access the Website we may place “cookies” on your hard drive for record-keeping purposes to enhance your experience or sometimes to personalize your experience. Cookies are small text files that are placed on your computer’s hard drive by the website you visit. Cookies help us to identify information relating to your activities and to retain information relating to your preferences and history on the Website.

  • You may choose to disable cookies by turning off the cookie feature when prompted on the Website. However, by disabling this feature, some parts of the Website may not function properly. This may prevent you from taking full advantage of the Website.

  • We do not have control over the cookies placed by third-party service providers.   

How we use the collected information

  • Collected information is used for the following purposes:

  • To communicate with you: There are various ways through which we may communicate with you. These include telephone, SMS, email, and post. If we contact you using the telephone number(s) that you have provided (landline and/or mobile), and you are not available which results in the call being directed to a voicemail/answering service, a brief voice message may be left on your voicemail/answering service as appropriate. The information in the message will be limited and include only the relevant, basic details so you can identify who the call is from, what the call is regarding, and details of how to call back. We may also communicate with you by SMS and/or unencrypted email. This is in order to provide you with documentation/information relevant to your consultations and ongoing healthcare. If sensitive clinical information needs to be provided to you, we may communicate with you by encrypted email.

  • Please note that, although providing your mobile number and email address and stating a preference to be communicated by a particular method will be taken as confirmation that you are happy for us to contact you via these channels, we do not rely on your consent to process your personal data in order to correspond with you about your treatment. Processing your personal data for these purposes is justified on the basis it is necessary to provide you with healthcare services.  

  • Account set up and administration: Register you as a patient and, where necessary, carry out standard background and other regulatory checks. The invoice you or your family.

  • To personalize your experience: The email address and phone numbers you provide may be used to identify you, communicate with you, respond to inquiries, questions, and/or other requests from you, customize your experience on the Website, and provide you with healthcare and other relevant services.

  • Conduct local internal clinical audits

  • Communicate with any other third party that you request about your care

  • Comply with our legal and/or regulatory obligations and defend or exercise my legal rights

  • Manage our clinic operations.

  • We do not sell, rent, distribute, or otherwise make personal information commercially available to any third party, except as described in this policy or with your prior permission.

Why we use your personal information

  • Our lawful basis for using your information for the purposes listed above are: It is necessary to perform our contract with you, necessary to meet legal/regulatory obligations and it is necessary for our legitimate interests. For special categories data – It is necessary for the protection of your vital interests. It is necessary for us to provide you with healthcare.

Protection of your information

  • We take the security of personal data and other confidential information very seriously. We are committed to respecting and protecting your privacy when we deal with your personal information and to complying with applicable data protection legislation and medical confidentiality guidelines.

  • The Data Protection Act 1998 and General Data Protection Regulation require individuals to register with the Information Commissioner to describe the purposes for which they process personal and sensitive information. Dr Shastri is registered with the Information Commissioner’s Office (ICO). Dr Shastri is registered as a data controller and our registration can be viewed online in the public register at

  • All uses of your information will comply with the Data Protection Act 1998 and GDPR 2018 legislation

  • Your personal information is held securely on a secure cloud-based electronic patient medical record database, accessed only via two-factor authentication. 

Storing and deleting your personal information

  • We will only retain your personal information for as long as necessary to fulfill the purposes for which we have collected it or to fulfill other lawful purposes as stated in this Policy. When such lawful purpose has ceased to exist for holding your data, we will securely destroy your personal information. For electronically stored data- Digital Shredding or Wiping- by removing data in such a way that prevents an end-user from easily recovering it. For physical data – Shredding of the documents.

Your data protection rights

  • Under data protection law, you have rights including:

  • Your right of access – You have the right to ask us for copies of your personal information.

  • Your right to rectification – You have the right to ask us to rectify personal information you think is inaccurate. You also have the right to ask us to complete information you think is incomplete.

  • Your right to erasure – You have the right to ask us to erase your personal information in certain circumstances.

  • Your right to restriction of processing – You have the right to ask us to restrict the processing of your personal information in certain circumstances.

  • Your right to object to processing – You have the right to object to the processing of your personal information in certain circumstances.

  • Your right to data portability – You have the right to ask that we transfer the personal information you gave us to another organization, or to you, in certain circumstances.

Disclosure of your personal information

  • We may disclose some of your personal information to:

  • Other clinicians involved in your care, including your GP or other referring professional, pharmacists, therapists, or other medical professionals. We will seek your consent before sharing your personal information with such third parties.
    If you do not consent to us sharing information with your GP, we will discuss with you the most appropriate way forward depending on your circumstances.

  • In cases where there is a potential risk to your health (for example if you are acutely unwell, have relapsed into severe addiction, or have intense suicidal thoughts), we may discuss with you that we are not able to continue holding responsibility for your psychiatric care unless you provide consent to speak to third parties (such as a family member,  your GP or local NHS Mental Health Services such as the Crisis team) in order to ensure your safety and to avoid misleading other people involved in your care. If this is the case, we will discuss this with you with a view to arriving at an acceptable solution.

  • In certain emergencies or extreme circumstances, we may contact a third party (usually the Next of Kin you have provided in the Registration Form or a health professional involved in your care such as your GP or a Therapist). This can happen if there is a significant risk to your health or safety or that of others if there is a safeguarding concern or a situation where there is a concern about your mental capacity (as per the Mental Capacity Act) or if there is a need for a Mental Health Act Assessment (as per the Mental Health Act). This is in accordance with the standards of practice for all Psychiatrists licensed to practice in the UK. In every case, we will make our best effort to discuss the situation with you prior to contacting anyone.

  • Your health insurance provider.  We will seek your consent before sharing medical information with your health insurance provider.

  • The Care Quality Commission, the Court, or other regulatory or public body if we are under a duty to disclose or share your personal data in order to comply with any legal obligation, including if a crime is being investigated or a formal court order has been issued;

  • Our indemnity organization/insurer and our solicitors in the event of a civil claim being brought against us;

  • Our payment services providers enable the processing of your payment details. In these cases, only the minimum information such as your name and email will be shared, as well as information relevant to the invoice such as the date of the consultation or other services charged such as a repeat prescription.

Changes to this privacy policy

  • We can update and revise this Privacy Policy from time to time. The revised Privacy Policy will be posted as a notification here at this link http://www.cognivalue/privacy-policy/. You are encouraged to periodically check this page to stay informed about changes to our Privacy Policy. The revised Policy will be effective from the date stated on the revised Privacy Policy. If you disagree with any of the changes to the Privacy Policy, please refrain from using or availing of the services of the Website. Your continued use or availing of the Website following the posting of the revised Policy will indicate your acceptance and acknowledgment of the changes and you will be bound by it.

Contacting us

If you have any questions about how we use your information, please send an email to or write to Dr. Abhishek Shastri, Banner House, 29 Byron Road, Harrow HA1 1JR.

For independent advice about data protection, you can contact:
The Information Commissioner
Wycliffe House
Water Lane
Phone: 08456 30 60 60