Last updated: October 2026

I am committed to protecting your privacy and handling your personal data in a transparent, secure, and responsible manner. 

1. Who I Am

This website and specialist dyslexia assessment practice are run by Mrs Lauren Craft.  For the purposes of data protection law, I am the Data Controller responsible for the personal information you share with me. I am registered with the Information Commissioner’s Office (IOC), registration number, ZC260444. 

If you have any questions about this policy or how your data is used, you can email me at: craftdyslexia@gmail.com

2. What Information I Collect

For children and young people, information is usually provided by parents or carers, and sometimes by schools, with consent.

I typically collect and process the following types of personal data:

• Contact Information: Name, address, email address, telephone number, and other details required to communicate with you regarding the assessment process. 
• Background and Case History Information: Information provided through questionnaires, interviews, referral forms, or discussions, including relevant developmental, educational, medical, family, and support history. 
• Diagnostic Assessment Records: Assessment results, observations, screening outcomes, clinical notes, reports, recommendations, and other records generated during the assessment process. 
• Special Category (Sensitive) Personal Data: Information relating to health conditions, disabilities, neurodevelopmental differences, specific learning difficulties, support needs, and the reasons for seeking an assessment, where relevant to the services provided. 
• Communication and Appointment Records: Correspondence, emails, telephone conversations, meeting notes, and records of appointments or assessment sessions. 
• Third-Party Information: Information provided by or shared with family members, educational settings, employers, healthcare professionals, or other relevant parties where appropriate consent has been obtained. 
• Website and Technical Information: Limited information relating to website use, including cookies and similar technologies, where applicable.

3. How I Use Personal Information

Personal data is collected and used only where necessary and for legitimate purposes, including:

• Arranging and administering assessments
• Producing tailored assessment reports and recommendations
• Communicating with parents/carers/learners, schools, or other professionals (with consent)
• Meeting professional, legal, and safeguarding obligations
• Maintaining accurate records

I do not use personal data for marketing purposes without your explicit consent.

4. Legal Basis for Processing

Under UK GDPR, I process personal data based on one or more of the following lawful bases:

• Consent – where you have given clear permission
• Contract – where processing is necessary to provide an agreed service
• Legal obligation – where I am required to comply with the law
• Legitimate interests – where processing is necessary for professional practice and does not override your rights

5. Sharing Information

Personal information is treated as confidential. I will not share data with third parties unless:

• You have given explicit consent
• It is necessary for safeguarding purposes
• I am required to do so by law

Where information is shared, it is done securely and on a need‑to‑know basis.

6. How Long I Keep Information

For children and young people, assessment reports are kept until the individual reaches age 24. This allows for the limitation period that begins once a child reaches adulthood. All informal assessment records associated with background information are retained for six months. After these two time points, data is securely deleted or destroyed.

I strongly recommend that families keep their own copy of assessment reports securely.

7. Your Rights

Under data protection law, you have the right to:

• Access the personal data I hold about you
• Request corrections to inaccurate or incomplete information
• Request the deletion of data (where applicable)
• Withdraw consent (where processing is based on consent)
• Ask questions about how your data is used

Requests can be made in writing using the contact details above.

8. Safeguarding and Confidentiality

If information shared during the assessment raises concerns about the safety or wellbeing of a child or young person, I have a professional and legal duty to follow safeguarding procedures. This may involve sharing information with relevant services where required.

9. Data Storage and Security

All personal data is stored securely, whether in electronic or paper form. Access is restricted to the assessor only. Appropriate technical and organisational measures are in place to protect data from loss, misuse, or unauthorised access.

10. Use of AI

AI tools may occasionally be used to support administrative tasks, such as proofreading, checking report clarity, or improving written communication. Any personal information is fully anonymised before being entered into an AI system, and no identifying information is shared. Where AI tools are used, settings and safeguards are applied to ensure information is not used for AI model training. AI is not used to make diagnostic decisions, assessments, or professional judgements. Any AI-generated suggestions are carefully reviewed, edited, and approved by me before use.

I am registered with the Information Commissioner's Office (ICO) and adhere to professional standards relating to confidentiality, data protection, and ethical practice.

11. Third-Party Services

Services that process data through this website:

• IONOS (website hosting)
• Googlemail

12. Website Cookies

You can manage cookie preferences through your browser settings.

This website is hosted by IONOS. Technical information may be collected and processed by IONOS to ensure the security, performance, and operation of the website. 

This website uses IONOS SiteAnalytics to understand how visitors use the website and to improve its performance. SiteAnalytics is provided by IONOS and does not use cookies. 

This website uses marketingRadar, provided through IONOS, to monitor online presence, reputation, and marketing performance. This helps monitor business visibility and publicly available online information.

13. Changes to This Policy

This Privacy Policy may be updated from time to time. The most recent version will always be available on my website