top of page

Privacy Policy

Privacy Notice for Dyslexia Diagnostic Assessment Services

Cara Mullins(“the Assessor”) is committed to protecting and respecting your privacy.

This Privacy Policy explains how personal information is collected, used, stored, and shared in relation to dyslexia diagnostic assessment services.

This policy is written in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

 

1. Data Controller

The Data Controller is:

Name: Cara Mullins
Email: cara@caramullins.com
Phone: 07495 921395

 

2. Information Collected

The Assessor may collect and process the following types of personal information:

Personal Information

  • Name

  • Date of birth

  • Address

  • Telephone number

  • Email address

  • School, college, or university details

Educational Information

  • School reports

  • Previous assessment reports

  • SEND documentation

  • Examination Access Arrangement history

  • Educational background information

Assessment Information

  • Standardised test scores

  • Observation notes

  • Diagnostic findings

  • Recommendations

  • Correspondence relating to the assessment

Special Category Data

Some information collected may be considered “special category data” under UK GDPR, including information relating to:

  • learning difficulties,

  • disabilities,

  • special educational needs,

  • and relevant medical or developmental history.

Such information is collected only where necessary for the assessment process.

 

3. Purpose for Processing Information

Personal data is collected and processed for the purposes of:

  • arranging and conducting dyslexia diagnostic assessments;

  • producing written assessment reports;

  • supporting applications for Examination Access Arrangements or Disabled Students’ Allowance where appropriate;

  • communicating with clients, parents/carers, schools, colleges, or other authorised professionals;

  • maintaining professional records;

  • meeting legal, professional, insurance, safeguarding, and regulatory obligations.

 

4. Lawful Basis for Processing

Information is processed under the following lawful bases:

Contract

Processing is necessary in order to provide the assessment service requested.

Legitimate Interests

Processing is necessary for professional record keeping, administration, and quality assurance.

Legal Obligations

Certain information may be processed to comply with legal or safeguarding obligations.

Explicit Consent

Special category data is processed with explicit consent from the client or parent/carer where required.

 

5. Sharing Information

The Assessor treats all information confidentially.

Assessment reports and personal information will not normally be shared with third parties unless:

  • written consent has been provided;

  • sharing is necessary for safeguarding purposes;

  • or disclosure is required by law.

The final report is provided to the Client, and it is the Client’s responsibility to share the report with professionals who have a legitimate need to access it, such as:

  • school staff,

  • SENCOs,

  • examination officers,

  • educational psychologists,

  • colleges,

  • universities,

  • or other relevant professionals.

Where consent is given for information sharing, only relevant information will be disclosed.

 

6. Storage and Security of Information

Records are stored securely in password-protected electronic systems and/or locked physical storage.

Reasonable measures are taken to protect personal information against:

  • unauthorised access,

  • accidental loss,

  • misuse,

  • disclosure,

  • or destruction.

Electronic communications cannot be guaranteed to be completely secure, and clients should be aware of the potential risks associated with email communication.

 

Security of Assessment Materials and Test Papers

The Assessor takes appropriate steps to ensure the security and confidentiality of all assessment materials, including standardised test papers, score sheets, handwritten notes, and related assessment documentation.

All assessment materials are stored securely and handled in accordance with professional testing standards, publisher requirements, copyright, and data protection legislation.

Assessment papers and handwritten working documents containing personal information will only be retained for as long as reasonably necessary for:

  • scoring and checking purposes;

  • completion of the assessment report;

  • professional record keeping;

  • and responding to any immediate queries regarding the assessment.

Once the final report has been completed and provided to the Client, paper-based test materials containing the client’s responses and personal data will normally be securely shredded and disposed of in a confidential manner, unless there is a legal, safeguarding, insurance, or professional requirement to retain specific records for longer.

Electronic assessment records and summary data may continue to be retained securely in accordance with the Assessor’s data retention policy.

 

7. Retention of Records

Assessment records and reports are retained following the assessment date for 7 years in accordance with professional guidance, insurance requirements, and legal obligations.

At the end of the retention period, records will be securely destroyed or deleted.

 

8. Your Rights

Under UK GDPR, individuals have the right to:

  • request access to their personal information;

  • request correction of inaccurate information;

  • request restriction of processing in certain circumstances;

  • request erasure of data where appropriate;

  • object to certain forms of processing;

  • withdraw consent where processing is based on consent.

Requests should be made in writing to the Assessor.

Some rights may be limited where the Assessor is legally or professionally required to retain information.

 

9. Safeguarding

The Assessor has a professional duty to respond appropriately to safeguarding concerns involving children or vulnerable adults.

Where there is concern regarding safety or welfare, relevant information may be shared with appropriate authorities without consent where legally justified.

 

10. Complaints

If you have concerns about how your personal data has been handled, please contact the Assessor in the first instance.

You also have the right to complain to the Information Commissioner’s Office (ICO):

Information Commissioner’s Office
Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF

Website: www.ico.org.uk

 

11. Changes to This Privacy Policy

This Privacy Policy may be updated from time to time to reflect changes in legal requirements or professional practice.

The most recent version will always be available upon request.

​

Revised and Updated by Cara Mullins, June 2026.

bottom of page