Privacy Policy and Data Protection

Karen Hutchinson

25, Bondgate, Helmsley, North Yorkshire, YO62 5EY

Privacy Policy and Data Protection Document

 

I am an independent dyslexia specialist, teacher, assessor and access arrangements assessor. I offer a range of services, including teaching, assessments and support for schools. For my business operations, including insurance, employment, finance, and legal obligations such as ICO registration, I am the data controller and registered with the Information Commissioner’s Officer (ICO) under registration number ZA30671

 

 

General Data Protection Regulations (GDPR) Information Privacy Policy

Dottys Dyslexia takes your privacy seriously. This Privacy Policy provides detailed information on when and why we collect your personal information, how we use it, the limited conditions under which we may disclose it to others, and how we keep it secure.

Dottys Dyslexia encourages Users to carefully read the Privacy Policy and use it to make informed decisions.

Why Does Dottys Dyslexia Need to Collect this Information?

  • The intended purpose of processing your personal data is to plan and carry out the assessment requested by the client/learner/school. Depending upon the nature of the contract with you, we collect personal data for the purpose of forming a professional opinion or diagnosis. In so doing, we will only collect information from you that is relevant to the purpose of undertaking that assessment and the associated and expected reporting, profiling and advising.
  • Details necessary to deliver services, such as school information, staff names, roles, and contact details.
  • For teaching and assessment of children: names, health, educational background, and developmental information.
  • In some cases, with permission, I may collect additional information from third parties, such as schools, parents, or professionals involved with the individual being assessed or taught.

What Type of Data Does Dottys Dyslexia Collect?

Personal Information.

  • Personal identifiers and biographical information – date of birth
  • Contact details- home address, email address and telephone number
  • Sensitive personal data- details of why an individual seeks an assessment, details of a disability or specific learning difficulty, details of support a client/learner may have had in the past, assessment data, and notes written during and after support or assessment sessions or after other contact with client/learner
  • Payment information
  • Dates of meetings held with a client/learner
  • Family Details – details of other family members with whom a client/learner or a client/learner’s school/college/workplace has given Dottys Dyslexia consent to liaise.

Non-Identifiable Information:

  • This includes data gathered through the use of my website, such as pages viewed, online browsing behaviour, clicks, and other actions. The information collected does not identify you but shows engagement with Dottys Dyslexia’s website.

What allowsDottys Dyslexia to Collect and use this Information?

  • Consent is voluntarily given by adults and children over the age of 13. Children’s parents are required to give consent for their child so thatinformation can be collected.
  • When you voluntarily provide us with your personal details in order to access Dottys Dyslexia to learn or enquire about our services.
  • The intended purpose of processing your personal data is to plan and carry out the assessment requested by the client/learner/school. Depending upon the nature of the contract with you, we collect personal data for the purpose of forming a professional opinion or diagnosis. In so doing, we will only collect information from you that is relevant to the purpose of undertaking that assessment and the associated and expected reporting, profiling and advising.
    • Information is collected necessary to deliver services, such as school information, staff names, roles, and contact details.
    • For the teaching and assessment of children: names, health, educational background, and developmental information may be collected.
    • In some cases, with permission, Dottys Dyslexia may collect additional information from third parties, such as schools, parents, or professionals involved with the individual being assessed or taught.
    • From third-party providers, services and public registersthat help provide background information for assessments or tutoring

How is personal data stored at Dottys Dyslexia?

  • We take our responsibility for protecting and holding your personal data very seriously. We will continue to do so in accordance with our professional codes of conduct and the GDPR regulations.
  • After an assessment, we will actively keep your report for seven years or until the client reaches the age of 25 in accordance with legal requirements. All other data will be destroyed.
  • Contact data will be reviewed annually to ensure the accuracy of the data held.
  • We will only store or transfer your personal information in the UK. This means that it will be fully protected under the GDPR.
  • The security of your personal data is essential to us and to protect your data, we take a number of important measures, including the following:
    • All files are secure and password-protected
    • our servers are password-protected
    • All filing cabinets are locked.

Who might Dottys Dyslexia share this Information with?

  • To provide feedback on progress.
  • A final report can be sent to the client/learner’s school SENCo with your permission.
  • Fully anonymised assessment reports may be shared with the BDA (British Dyslexia Association) as part of the submission of evidence to renew my Assessing Practising Certificate (APC) every three years. The client cannot be identified.

This is the link to BDA’s privacy policy:

https://www.bdadyslexia.org.uk/legal/privacy-policy

What are your Rights?

Access to your personal information.

You are entitled to:

  • View or amend the personal information that Dottys Dyslexia holds.
  • Delete the personal information that Dottys Dyslexia holds.
  • Restrict or object to how your personal information is held by Dottys Dyslexia.
  • If you have provided personal data to Dottys Dyslexia directly, and we are using it with your consent or for the performance of a contract, and that data is processed using automated means, you have the right to ask for a copy of that personal information to re-use with another service or business.

You have the right to withdraw your consentfor Dottys Dyslexia to hold or use your personal information. Email your request to [email protected],  use the contact form on the website or send your request by post.

Note: Requests from clients/learners to delete data relating to an individual will be considered on a case-by-case basis, but we may be unable to remove all assessment records for legal or accounting reasons.

I am fully compliant with the British Dyslexia Associations Code of Conduct, participate in regular training and CPD and hold an enhanced DBS; I am happy to show you any certificates if needed.

 

Signed K.E. Hutchinson 31st May 2026.

Changes to this Privacy Notice:This policy is reviewed annually. The last review was May 2026.