Privacy notice

This privacy notice aims to reassure you that I am taking your privacy seriously. In summary, I will only keep what is necessary, I will keep it securely, and I will only share it with a third party with your explicit consent.

Who I am

This website and practice are run by Dyslexia Assessment Surrey, a specialist dyslexia assessment practice based in Surbiton, Surrey. I am the data controller for the information you share with me. The practice address is 15 Seymour Gardens, Surbiton, KT5 8QE, and I am registered with the Information Commissioner’s Office, registration number ZA307205.

The data I hold

• Personal information: name, address, your child’s date of birth, and other relevant background information.
• Assessment reports from other specialists, passed to me by you.
• Standardised data and anecdotal evidence gathered through the assessment process: the assessment report.
• Candidate response test papers, which are destroyed after use.
• Audio of your child’s verbal responses, which is destroyed after analysis.

How it reaches me

The information comes to me via:

• Emails from you.
• Your completion of a questionnaire, which is destroyed after the assessment.
• Face-to-face meetings, with you and your child.
• Information reported by your child’s school in response to a questionnaire from me, which is destroyed after the assessment.
• The assessment session or sessions themselves.

The website enquiry form

When you send the enquiry form on this website, your message is stored securely with Supabase, a database service that acts as my data processor for that submission. The website can only add submissions; nothing can be read back from it publicly, and only I can view them through a private, password-protected dashboard. Supabase stores this information on my behalf under its own data processing terms. The database is hosted in Ireland, within the European Union, which UK data protection law recognises as providing equivalent protection.

Booking

If you book a call or an appointment through the online calendar, that calendar is provided by Calendly, which processes the booking details you enter under its own privacy terms, available at calendly.com/privacy. I do not sell your information, and I do not share it except where it is necessary to provide the service, or where the law requires it.

Where it is stored, and how it is kept secure

All data is stored securely.

• Working documents are held in a locked home office during the assessment process. All hard copies are shredded once the report has been published to the parent.
• Where personal drives, such as a computer or USB sticks, or Cloud storage are used, the data is password protected.
• If there is a breach of your data, I will tell you, and I will inform the Information Commissioner’s Office (ICO).

Who has access to it

• Only I have access to the data while it is being processed.
• Once an assessment report is completed, it is shared with you.
• The report will not be shared with anyone else without your consent.

Why I hold it

• I collect data in order to conduct a specialist teacher assessment.
• I need to keep the data, as detailed above, so that I can formulate an assessment report.

How long I keep it

• I will maintain access to the data, the assessment report, for six years after your child reaches the age of 18.
• The data is checked annually to make sure it is still needed, accurate and secure.
• Original pupil response and assessor record forms and booklets are destroyed once the report is published to you.

How to access your data

It is your responsibility to keep an electronic and paper copy of any assessment report, because I cannot store the data indefinitely. You can ask for the data I hold at any time by email, at info@dyslexia-assessment-surrey.co.uk. Requests to delete data relating to an individual are considered on a case-by-case basis, though I may be unable to remove all data for legal reasons.

Revoking your consent

You can revoke your consent at any time. Email me at info@dyslexia-assessment-surrey.co.uk and ask for your data to be deleted, as long as the data is not required for legal or auditing purposes.

The use of AI

• I will never enter personally identifiable information into applications containing AI functionality.
• AI tool settings are configured to prevent input data from being used to train future models.

Cookies and tracking

This website does not use advertising cookies, or third-party analytics or tracking. If that ever changes, this notice will be updated first.

Complaints

If you are unhappy with how I have handled your information, you can complain to the Information Commissioner’s Office, the UK regulator, at ico.org.uk.

This notice was created on 1 June 2018, and is renewed annually.

Contact