Privacy
Privacy policy
How your information is handled, in plain terms. This page explains what I collect, why, and the choices you have.
Who I am
This website is run by Dyslexia Assessment Surrey, a specialist dyslexia assessment practice based in Surbiton, Surrey. I am the data controller for the information you share with me.
The practice address is 15 Seymour Gardens, Surbiton, KT5 8QE. I am registered with the Information Commissioner’s Office, registration number ZA307205.
What information I collect
- When you use the enquiry form, I collect your name, email, an optional phone number, and the message you send.
- If you complete a pre-assessment or school questionnaire, I collect the details on that form, which help me prepare for an assessment.
- If you book a call or an appointment through the online calendar, the booking provider processes the booking details you enter.
- If you go ahead with an assessment, I hold the records needed to carry it out and to write your report, as part of providing the service.
How I use your information
I use your information only to:
- respond to your enquiry and arrange a call;
- prepare for, carry out, and write up an assessment, if you choose to go ahead;
- keep the records I am professionally required to keep.
The lawful bases I rely on are your consent (for example, when you send an enquiry), and the performance of our agreement when you book an assessment.
Where form submissions are stored
When you send the enquiry form, the pre-assessment questionnaire, or the school questionnaire, your answers are stored securely with Supabase, a database service that acts as my data processor for these submissions. The website can only add submissions to that database; nothing can be read back from it publicly. Only I can view submissions, through a private, password-protected dashboard.
Supabase stores this information on my behalf and processes it under its own data processing terms, available at supabase.com/privacy. The database is hosted in Ireland, within the European Union. That means your information is stored outside the UK, in a place UK data protection law recognises as providing equivalent protection.
Booking and third parties
The online booking calendar is provided by a third party, which processes your booking details under its own privacy terms. I do not sell your information to anyone, and I do not share it except where it is necessary to provide the service, or where the law requires it.
{{ placeholder: booking provider name and link to its privacy terms, TBC }}
Cookies and tracking
This website does not use advertising cookies or third-party analytics or tracking. If that ever changes, this policy will be updated first.
How long I keep your information
Assessment reports for children are held for six years after the young person reaches the age of 25. Reports for adults (18 and over) are held for six years. All other records, including enquiry messages, are held only as long as is necessary for their intended purpose, and then securely deleted.
Your rights
Under UK data protection law, you have the right to:
- ask for a copy of the information I hold about you;
- ask me to correct anything that is wrong;
- ask me to delete your information, where there is no legal reason to keep it;
- object to, or ask me to restrict, how I use it.
To make any of these requests, please email info@dyslexia-assessment-surrey.co.uk, or write to 15 Seymour Gardens, Surbiton, KT5 8QE.
Complaints
If you are unhappy with how I have handled your information, you can complain to the Information Commissioner’s Office, the UK regulator, at ico.org.uk.
Changes to this policy
I may update this policy from time to time. The latest version will always be on this page.