Only what is needed
Collect only the information needed to answer enquiries and provide agreed services.
Privacy • data protection
This notice explains what personal information Dyslexia Clarity may collect, why it is used, who it may be shared with, and the choices and rights available to you.
The principles behind how personal information should be handled.
Collect only the information needed to answer enquiries and provide agreed services.
Each use of personal information must have a documented lawful basis.
Sensitive information needs extra care, limited access and appropriate safeguards.
Who is responsible
The controller decides why and how personal information is used. Before publication, add the legal name or trading status, postal address, privacy email and ICO registration number if one is required.
This notice covers website enquiries and assessment services. Check it against the actual forms, software, suppliers and working practices before launch.
Information may come from you, the person being assessed or, where authorised, from a parent, carer, education provider or other professional.
Names, contact details, your relationship to the person being assessed and the information included in your message.
Appointment details, learning history, notes, test results, reports, communications, billing and payment records.
IP address, browser or device information, security logs, cookie choices and analytics information if those tools are enabled.
Dyslexia Clarity must record the correct lawful basis for each purpose before information is collected.
To respond and take steps you request before a contract, or to manage an agreed service.
To provide the service. Confirm the Article 6 basis and any Article 9 condition needed for sensitive data.
For accounts, security, record-keeping and legal claims where a legal obligation or legitimate interest applies.
For marketing only where permitted, with consent where required and a simple way to opt out.
Dyslexia assessment may involve health, educational and other sensitive information. Extra protections apply.
Be specific about actual suppliers and sharing arrangements before publication.
IT, email, booking or payment providers; professional advisers; and, where authorised, education or workplace contacts. Information may also be shared where the law or safeguarding duties require it.
List any provider that stores information outside the UK, the destination and the safeguard used for the transfer.
Confirm the safeguards actually used, such as access controls, multi-factor authentication, encryption, backups and secure disposal.
Publish exact periods or clear criteria, and keep an internal retention schedule.
[Confirm period] for enquiries that do not lead to an assessment.
[Confirm period] based on professional, insurance and legal requirements.
[Confirm period] in line with tax and accounting duties.
Until consent is withdrawn or no longer needed; keep an opt-out record where necessary.
Rights depend on the circumstances and lawful basis, and some are not absolute. You can ask to:
Cookies, questions and complaints
Strictly necessary technologies may be used to operate and protect the site. Optional analytics or marketing technologies should only be used where permitted and with consent when required. Before launch, list each tool, provider, purpose and duration.
Add a direct privacy-complaint method before publication. People can also complain to the ICO.
Take the first step towards understanding learning needs, recognising strengths and finding the right support.
Book an initial conversation