PRIVACY NOTICE

Beehive Dyslexia
Last updated: 06 September 2026

1. Who I Am

Beehive Dyslexia is a specialist dyslexia assessment service.

Beehive Dyslexia is the trading name of:

Karen Wilkinson

Email: info@beehivedyslexia.co.uk

I am registered with the Information Commissioner's Office (ICO) as a data controller.

2. What Information I Collect

To provide dyslexia assessment services, I may collect and process personal information relevant to the assessment.

Personal information

This may include:

• Name

• Date of birth

• Address

• Email address

• Telephone number

• Information about schools, colleges, universities or employment where relevant to the assessment

Special category personal information

A dyslexia assessment may involve the processing of sensitive personal information, including:

• Information about learning difficulties and educational history

• Assessment results and reports

• Information about cognitive and literacy skills

• Relevant health, developmental or medical information

• Information provided by parents or people with parental responsibility

• Information provided by schools, colleges or other professionals

For children and young people, this information is usually provided by a parent or legal guardian.

I only collect information that is relevant and necessary for the assessment.

3. Information Collected When You Contact Me

If you contact me by email, telephone or through the Beehive Dyslexia website, I may collect:

• Your name

• Your contact details

• Information you choose to provide about your enquiry

I use this information to respond to your enquiry and, where appropriate, discuss or arrange an assessment.

4. Why I Collect This Information

I collect and use this personal information to:

• Respond to enquiries

• Carry out dyslexia assessments

• Review relevant educational and developmental information

• Score and interpret assessment results

• Prepare professional assessment reports

• Provide recommendations for support and reasonable adjustments

• Support applications for examination access arrangements

• Communicate with clients, parents, schools and other professionals

• Meet professional, ethical and legal obligations

I only collect information that is necessary for these purposes.

5. The Legal Basis for Processing Your Information

Under the UK General Data Protection Regulation (UK GDPR), I must have a lawful basis for processing personal information.

Providing the assessment service

For the processing of personal information necessary to provide a dyslexia assessment service, I rely on:

Article 6(1)(b) UK GDPR – Contract

Processing is necessary to take steps at your request before entering into an agreement, and to provide the dyslexia assessment service once it has been agreed.

Special category personal information

Dyslexia assessments may involve the processing of special category personal information.

Before processing relevant special category personal information for the purposes of an assessment, I seek:

Article 9(2)(a) UK GDPR – Explicit Consent

Explicit consent to process relevant special category personal information for the purposes of carrying out the dyslexia assessment and preparing the assessment report.

Where explicit consent is relied upon, you may withdraw your consent. However, depending on when consent is withdrawn and the information required to complete the assessment, withdrawal of consent may affect my ability to continue or complete the assessment.

6. How Assessment Information is Collected and Used

Information may be collected in several ways during the assessment process.

Background information questionnaires

Before an assessment, I may ask you to complete a background information questionnaire containing information relevant to the assessment.

This information is used to help prepare for and carry out the assessment and to assist in preparing the assessment report.

Details of how long this information is retained are set out in Section 10 of this Privacy Notice.

Written assessment forms and notes

During a face-to-face assessment, I may make written notes and complete assessment forms.

These documents are used to support the assessment process and the preparation of the final report.

Written working assessment forms and notes are securely shredded after the assessment has been completed and the final assessment report has been completed and checked.

Audio recordings

With your prior permission, part or all of an assessment session may be audio recorded.

Audio recording can assist me in reviewing relevant responses after the assessment, and can help support accurate scoring, interpretation and preparation of a comprehensive assessment report.

Audio recording is optional.

An assessment can still take place if you do not give permission for recording.

The recording:

• Is made only with prior permission

• Is used only to support the assessment, scoring and preparation of the report

• Is stored securely on an encrypted device

• Is not used for teaching, training, marketing or research

• Is securely deleted after the assessment report has been completed and checked.

The audio recording is not retained as part of the long-term assessment record.

7. Sharing Your Information

Your personal information is treated as confidential.

With your explicit consent, I may share relevant information with:

• Parents or people with parental responsibility

• Schools

• Colleges or universities

• Exam boards

• Other professionals involved in support

I do not sell or share personal data for marketing purposes.

In exceptional circumstances, information may be disclosed without consent where disclosure is required or permitted by law, including where necessary in connection with safeguarding or other legal obligations.

8. How Your Information Is Stored and Protected

I take appropriate technical and organisational measures to protect personal information.

These measures include:

• Password-protected devices and accounts with Multi Factor Authentication (MFA) enforced

• Encryption on devices used to store or access sensitive personal information

• Secure cloud storage

• Access controls

• Secure online services

• Secure deletion and destruction procedures

I use the following third-party services to help operate my business and provide assessments:

• Squarespace – website design and hosting

• Jotform – secure collection of background information through online questionnaires completed before an assessment

• Tresorit – secure storage of assessment reports during and after completion, and secure delivery of completed reports using encrypted links

• Google Workspace / Gmail – business email and communication.

9. Secure Delivery of Assessment Reports

Completed assessment reports are not normally sent as email attachments.

The final report is stored securely and delivered using a secure, password-protected link.

The link:

• Is sent to the recipient by email

• Is protected by a separate password

• Has a limited period of availability

• Expires after 10 days

• May be withdrawn once confirmation has been received that the report has been successfully downloaded.

The password required to access the report is normally sent separately by SMS text message.

This provides additional protection for sensitive assessment information.

10. How long I keep your information

I retain personal information only for as long as necessary for the purposes for which it was collected and to meet applicable professional, legal and insurance requirements.

My retention arrangements are as follows:

Background information questionnaires

The detailed background information questionnaire is retained for 30 days after the completed assessment report has been securely delivered, after which it is securely deleted

A limited record of consent may be retained alongside the assessment record for the same retention period as the completed assessment report, where necessary to demonstrate compliance with data protection requirements.

Written working assessment forms and notes

Securely shredded after the assessment has been completed and the final report has been completed and checked.

Audio recordings

Securely deleted after the assessment report has been completed and checked.

Secure report delivery links

Available for a maximum of 10 days and withdrawn once confirmation has been received that the report has been securely downloaded.

Completed assessment reports

Retained securely for 7 years

During this period, you may request a copy of your assessment report

At the end of the retention period, the report will be securely deleted unless there is a legal or other legitimate requirement to retain it for longer.

11.Your Rights

Under UK data protection law, you may have rights including the right to:

• Be informed about how your information is used

• Access your personal information

• Request correction of inaccurate information

• Request erasure in certain circumstances

• Request restriction of processing in certain circumstances

• Object to certain processing

• Request data portability where applicable

• Withdraw consent where processing is based on consent

• Complain to the Information Commissioner's Office

To exercise any of these rights, please contact me using the details at the beginning of this notice.

12.Children’s and Young People’s Information

When assessing children and young people, information will normally be provided by a parent or person with parental responsibility where appropriate.

Children and young people will be involved in the assessment process in an age-appropriate way.

Their views, privacy and personal information will be treated with particular care.

Children and young people have their own data protection rights, which may apply depending on their age and circumstances.