Privacy at a glance

The principles behind how personal information should be handled.

Only what is needed

Collect only the information needed to answer enquiries and provide agreed services.

Clear reasons

Each use of personal information must have a documented lawful basis.

Protected and limited

Sensitive information needs extra care, limited access and appropriate safeguards.

Who is responsible

Dyslexia Clarity is the data controller

The controller decides why and how personal information is used. Before publication, add the legal name or trading status, postal address, privacy email and ICO registration number if one is required.

Add contact detailsConfirm ICO statusAdd review date

Information we may collect

Information may come from you, the person being assessed or, where authorised, from a parent, carer, education provider or other professional.

Enquiries and contact

Names, contact details, your relationship to the person being assessed and the information included in your message.

Assessment and service records

Appointment details, learning history, notes, test results, reports, communications, billing and payment records.

Website and technical information

IP address, browser or device information, security logs, cookie choices and analytics information if those tools are enabled.

Why information is used

Dyslexia Clarity must record the correct lawful basis for each purpose before information is collected.

1

Enquiries and bookings

To respond and take steps you request before a contract, or to manage an agreed service.

2

Assessment services

To provide the service. Confirm the Article 6 basis and any Article 9 condition needed for sensitive data.

3

Business and legal duties

For accounts, security, record-keeping and legal claims where a legal obligation or legitimate interest applies.

4

Optional updates

For marketing only where permitted, with consent where required and a simple way to opt out.

Sensitive information and information about children

Dyslexia assessment may involve health, educational and other sensitive information. Extra protections apply.

  • Collect and keep only information that is necessary
  • Confirm and document the Article 9 special-category condition before launch
  • Explain privacy in clear, age-appropriate language
  • Involve a parent or carer when appropriate while respecting the individual’s rights
  • Share for safeguarding only where it is lawful, necessary and proportionate

Sharing, transfers and security

Be specific about actual suppliers and sharing arrangements before publication.

Who information may be shared with

IT, email, booking or payment providers; professional advisers; and, where authorised, education or workplace contacts. Information may also be shared where the law or safeguarding duties require it.

International transfers

List any provider that stores information outside the UK, the destination and the safeguard used for the transfer.

Keeping information secure

Confirm the safeguards actually used, such as access controls, multi-factor authentication, encryption, backups and secure disposal.

How long information is kept

Publish exact periods or clear criteria, and keep an internal retention schedule.

1

Enquiries

[Confirm period] for enquiries that do not lead to an assessment.

2

Assessment records

[Confirm period] based on professional, insurance and legal requirements.

3

Financial records

[Confirm period] in line with tax and accounting duties.

4

Marketing preferences

Until consent is withdrawn or no longer needed; keep an opt-out record where necessary.

Your data protection rights

Rights depend on the circumstances and lawful basis, and some are not absolute. You can ask to:

  • Access your personal information and receive a copy
  • Correct inaccurate or incomplete information
  • Erase, restrict or receive a portable copy where the law allows
  • Object, including to direct marketing, and withdraw consent at any time
  • Make a data protection complaint and receive a clear response

Cookies, questions and complaints

You should always know how to reach us

Strictly necessary technologies may be used to operate and protect the site. Optional analytics or marketing technologies should only be used where permitted and with consent when required. Before launch, list each tool, provider, purpose and duration.

Ready to discuss a dyslexia assessment?

Take the first step towards understanding learning needs, recognising strengths and finding the right support.

Book an initial conversation