Privacy Policy

Last updated: January 2026

This privacy policy explains how personal information is collected, used, stored and protected, and outlines your rights under UK data protection law.

Dyslexia Coventry is owned and operated by Sarah Grainger, a sole trader. I provide specialist dyslexia assessments and related educational services for children, young people and adults.

I am registered with the Information Commissioner’s Office (ICO) and act as the Data Controller for all personal data collected. I comply with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

By contacting me, using my website, or engaging my services, you consent to the collection and use of your personal information as described in this policy.

If you have any questions about this policy or how your information is handled, please contact:

Email: dyslexia.coventry@gmail.com
Phone: 07368 533607
Website: www.dyslexiacoventry.co.uk

I may collect and store personal information including:

• Name, address, email address and telephone number
   
• Date of birth
   
• Educational setting, workplace or employer details
   
• Payment and invoicing information
   

For diagnostic assessments, this may also include special category data, such as:

• Information relating to learning difficulties or disabilities
   
• Medical or developmental background information (where shared)
   
• Educational history and previous assessment reports
   
• Information provided by parents, carers, schools or the individual being assessed
   
• Assessment notes, scores and written reports
   

Your personal information is collected and processed in order to:

• Provide dyslexia assessments and related educational services
   
• Prepare written diagnostic reports and recommendations
   
• Communicate with you before, during and after an assessment
   
• Liaise with schools, colleges, universities, employers or other professionals (with consent)
   
• Meet legal, professional, safeguarding and accounting obligations
   

The lawful bases for processing your data include:

• Contractual necessity
   
• Legitimate interests
   
• Legal obligation
   
• Consent, where required (particularly for special category data)
   

Your information may be used to:

• Carry out assessments and produce reports
   
• Communicate about appointments, reports or follow-up support
   
• Respond to enquiries or concerns
   
• Request feedback (optional)
   
• Provide information about services (you may opt out at any time)
   

Your data is never sold, rented or shared for marketing purposes.

Access to your information is strictly limited to:

• Sarah Grainger (Dyslexia Coventry)
   

Information will only be shared with third parties (such as schools, education centres, universities, employers or GPs) with your explicit consent, unless there is a legal requirement to do so.

Standardised assessment materials (including test papers, record forms, stimulus materials and scoring protocols) are subject to strict copyright and confidentiality agreements with test publishers and professional bodies.

As a result:

• Original test materials cannot be shared, copied or released
   
• These materials are exempt from disclosure under subject access requests made under UK GDPR
   
• This restriction protects the integrity, validity and future use of standardised assessments
   

Clients are entitled to:

• A full written diagnostic assessment report
   
• A clear explanation of findings and outcomes
   
• Access to personal data contained within the report
   

Original test materials remain confidential and are retained securely in accordance with publisher requirements and professional standards.

Your information is stored securely using a combination of:

• Password-protected and encrypted digital storage
   
• Secure iCloud storage
   
• Encrypted external hard drives
   
• Locked, fire-resistant storage for any paper records
   

Sensitive documents, including diagnostic reports, are password protected. Reasonable technical and organisational measures are in place to protect your data. While every effort is made to safeguard information, no system can be guaranteed to be completely secure.

Personal data is retained only for as long as necessary to meet professional, legal and regulatory requirements.

• Assessment reports and related records are retained in line with professional guidance
   
• At the time of writing, assessment records may be retained until the individual reaches the age of 25, where applicable
   
• Financial records are retained in accordance with HMRC requirements
   

Data that is no longer required is securely deleted or destroyed.

Under UK GDPR, you have the right to:

• Request access to your personal data
   
• Request correction of inaccurate or incomplete data
   
• Request deletion of your data (where legally permissible)
   
• Restrict or object to processing
   
• Request a copy of your data in a commonly used format
   
• Lodge a complaint with the Information Commissioner’s Office (ICO)
   

Please note that these rights do not extend to copyrighted test materials, which remain confidential under professional and publisher agreements.

You may withdraw your consent at any time by contacting Dyslexia Coventry. Please note that some information must still be retained to meet legal, safeguarding and professional obligations.

If you have concerns about how your data is handled, please contact me in the first instance. You also have the right to complain to:

Information Commissioner’s Office (ICO)
www.ico.org.uk

This privacy policy may be updated from time to time. Any changes will be published on this website. The date of the most recent update will always be shown at the top of this page.