Amber Delaney Diagnostics

Privacy Policy

Last updated: 5th March 2026

Who we are

Amber Delaney, trading as Amber Delaney Diagnostics, is a specialist assessment and tutoring practice based in East Dulwich, London. We provide diagnostic assessments and specialist tutoring for children and adults with learning differences, including dyslexia and ADHD.

We are registered as a data controller with the Information Commissioner's Office (ICO).

We take your privacy seriously. This policy explains what personal information we collect, why we hold it, who we may share it with, and how long we keep it. If you have any questions, please contact us at pa@amberdelaney-diagnostics.com.

What information we collect

Assessment and tutoring clients To deliver our services, we collect the following information:

  • Full name, address, and contact details

  • Date of birth

  • Educational history, including school records and the results of any previous assessments

  • Medical history and any existing diagnoses relevant to the assessment or tutoring

  • Assessment results and written reports produced by Amber Delaney Diagnostics

  • Financial and billing information

Where the client is a child, we collect the above in relation to the child, along with contact details for a parent or guardian. In cases where an adult client is still under parental care, we may treat the arrangement in the same way as a child client, with parental involvement as appropriate.

Website enquiries and cookies If you contact us via the enquiry form on our website (www.amberdelaney-diagnostics.com), we collect:

  • Your name and email address

  • The service you are enquiring about

  • Your child's name and age, if applicable

Our website is hosted on Squarespace, which uses essential cookies to ensure the site functions correctly, as well as analytics cookies to help us understand site traffic.

Why we collect this information (Our Lawful Basis)

Under UK data protection law, we must have a "lawful basis" for collecting and using your data.

  • Standard Personal Data: We process your standard personal and financial data (such as names, contact details, and billing information) on the basis of Contractual Necessity—meaning we need this information to fulfil our service agreement with you.

  • Special Category Data: Information regarding health, educational needs, and diagnoses (like ADHD or dyslexia) is classified as sensitive "Special Category Data". We process this data on the basis of your Explicit Consent (which is obtained when you sign our contract prior to assessment) and because it is necessary for the Provision of Health or Social Care (delivering specialist assessment and tutoring).

We do not use your personal data for automated decision-making or profiling.

Who we share information with

We do not sell your personal data, and we do not pass it to third parties for commercial purposes. We may share relevant information in the following circumstances, and only to the extent necessary:

  • Parents or guardians: Where the client is a child or where parental involvement forms part of the agreed service.

  • Schools, GPs, or SENCOs: We will only share your reports or recommendations with other professionals or institutions if you have given us explicit, written consent to do so for that specific party.

  • Administrative support: We work with a trusted virtual assistant who may handle client correspondence and administrative records on our behalf. They are bound by confidentiality obligations.

We will not share your information with anyone else without discussing this with you first, unless we are required to do so by law.

How we store your information and International Transfers

Your information is held securely across the following systems:

  • Tutorbird: Our client management and scheduling platform.

  • Google Workspace (Drive and Gmail): Used for document storage and correspondence.

  • FreeAgent: Used for invoicing and accounting.

  • QBCheck: Used for specific diagnostic screening tools.

  • Secure physical files: Some records are held in paper form and stored securely on our premises.

All digital systems are password-protected. We take reasonable technical and organisational steps to protect your data from unauthorised access, loss, or disclosure.

International Data Transfers: Some of the software providers we use (such as Google, Squarespace, and Tutorbird) may store data on servers located outside the UK. Whenever your personal data is transferred out of the UK, we ensure a similar degree of protection is afforded to it by ensuring standard contractual clauses or UK adequacy regulations are in place with these providers.

How long we keep your information

We retain client records in line with guidance from SASC (SpLD Assessment Standards Committee), Patoss, and UK tax law:

  • Standard assessment records (raw test data, questionnaires, background information) are kept for a minimum of 6 years.

  • Records for minors (clients under 18 at the time of assessment) are kept until the client reaches the age of 24.

  • Final assessment reports may be retained for up to 7 years.

  • Financial records (invoices, billing details) are kept for 6 years to comply with HMRC requirements.

  • Potential psychological injury claims: Where an assessment involves a potential claim, records are kept for 3 years from the date of the report, or from the client's 18th birthday if they were a minor.

After the relevant retention period, records are securely deleted or destroyed.

Your rights

Under the UK GDPR, you have several rights regarding your personal data, including the right to:

  • Access the personal information we hold about you.

  • Correct any information that is inaccurate or incomplete.

  • Request deletion of your personal data.

  • Restrict how we process your data.

  • Object to our processing of your data.

  • Request data portability (receiving a digital copy of your data to transfer elsewhere).

  • Withdraw consent: Where we rely on your consent to process your data, you can withdraw it at any time.

To make any of these requests, please email pa@amberdelaney-diagnostics.com. We will respond within 30 days. Please note that in some cases we may be unable to delete records in full (for example, where we are required to retain assessment records to meet our professional or legal obligations). We will always explain this clearly if it applies to your request.

You also have the right to make a complaint to the Information Commissioner's Office at www.ico.org.uk if you have concerns about how we handle your personal data.

Changes to this policy

We may update this policy from time to time to reflect changes in our practice or in data protection law. The current version will always be available on our website at www.amberdelaney-diagnostics.com. If we make significant changes, we will let you know directly.

Contact

If you have any questions about this policy or about how we handle your data, please contact: Amber Delaney Diagnostics East Dulwich, London pa@amberdelaney-diagnostics.com www.amberdelaney-diagnostics.com