Privacy Notice

At Hayley Leyshon Education Consultancy, I take your privacy seriously. This privacy notice explains how I collect, use, store and protect your personal information when you visit this website, contact me, purchase resources, or use my consultancy, advocacy or support services.

I process personal information in accordance with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, and other applicable UK data protection legislation.

1. Who I am

Hayley Leyshon Education Consultancy provides educational consultancy, SEND and inclusion support, parent advocacy, alternative provision consultancy, training and educational resources.

For the purposes of UK data protection law, I am the data controller for personal information that I collect directly through this website and through my services.

Contact:
Hayley Leyshon
Hayley Leyshon Education Consultancy
Email: hello@hayleyleyshon.co.uk

If you have any questions about how your personal information is handled, please contact me using the details above.

2. Information I may collect

The information I collect will depend on how you interact with me and the services you use.

This may include:

• your name
• email address
• telephone number
• organisation, school or setting
• job title or professional role
• information submitted through the website contact form
• correspondence between us
• appointment and meeting information
• invoices, payment and transaction information
• information required to deliver consultancy, advocacy or training services
• feedback or testimonials where you have agreed for these to be used

technical information relating to your use of the website, where applicable.

Information about children and young people

As part of my SEND, advocacy and consultancy work, parents, carers, schools or other professionals may share information with me about a child or young person.

This may include:

• educational history
• SEND information
• school reports and assessments
• EHCP documentation
• attendance information
• information about behaviour, regulation or wellbeing
• information relating to exclusions or suspensions
• correspondence with schools, local authorities or other professionals

other information relevant to understanding and supporting the child’s educational needs.

Some of this information may constitute special category personal data, particularly information concerning a child’s physical or mental health, disability or additional needs.

I only collect information that is relevant and necessary for the work I have been asked to undertake.

3. Why I use your information

I may use personal information to:

• respond to enquiries
• arrange consultations, meetings or training
• provide educational consultancy services
• provide SEND and parent advocacy support
• review documents provided to me
• communicate with schools, local authorities or other professionals where this forms part of the agreed service
• undertake alternative provision consultancy, review or quality-assurance work
• provide training or professional development
• process purchases and provide digital resources
• issue invoices and maintain financial records
• manage my professional relationship with clients
• improve my services and resources
• maintain appropriate safeguarding and professional records

comply with legal, regulatory, insurance or safeguarding obligations.

I will not use information about a child or family for unrelated purposes.

4. My lawful bases for processing information

Under UK GDPR, I must have a lawful basis for processing personal information.

Depending on the circumstances, I may rely upon:

Contract – where processing is necessary to provide a service you have requested or to take steps before entering into an agreement with you.

Legitimate interests – where processing is reasonably necessary to operate my consultancy and provide effective professional services, provided that those interests do not override your rights.

Legal obligation – where I am required to process or retain information in order to comply with the law.

Consent – where you have specifically agreed to a particular use of your information and consent is the appropriate lawful basis.

Where I process special category information, such as information concerning health, disability or SEND, I will also ensure that an appropriate additional condition under UK data protection law applies.

5. Information shared with me by schools or organisations

When I am commissioned by a school, alternative provision provider or another organisation, that organisation may provide information necessary for me to undertake the agreed work.

Where possible, information about individual children should be anonymised or pseudonymised unless identifiable information is genuinely necessary for the work being undertaken.

The commissioning organisation remains responsible for ensuring that it has an appropriate lawful basis for sharing personal information with me.

Where appropriate, separate data-processing or information-sharing arrangements may be agreed with commissioning organisations.

6. Sharing your information

I do not sell personal information.

I may share information where this is necessary to provide an agreed service. For example, with:

• a school or education setting
• a local authority
• another professional involved in supporting a child
• professional advisers, insurers or accountants

trusted technology or administrative service providers; or

organisations that process payments or provide website services on my behalf.

Where I am acting as a parent advocate, I will normally seek your agreement before communicating personal information to a school, local authority or another professional on your behalf.

I may disclose information without consent where I am legally required to do so or where there is a safeguarding concern that justifies disclosure.

7. Safeguarding

The welfare of children and young people is paramount.

Information shared with me will normally be treated confidentially. However, confidentiality cannot be guaranteed where information indicates that a child, young person or another person may be at risk of significant harm.

Where I believe information needs to be shared for safeguarding purposes, I will share only information that is necessary and appropriate, in accordance with applicable safeguarding and data protection requirements.

8. How I keep information secure

I take reasonable organisational and technical measures to protect personal information from:

• unauthorised access
• accidental loss
• inappropriate disclosure

alteration; or

destruction.

Access to personal information is limited to those who genuinely require it.

Where third-party services are used to store or process information, I take reasonable steps to ensure appropriate data protection arrangements are in place.

9. How long I keep information

I do not keep personal information for longer than is reasonably necessary

Retention periods will depend upon the type of information, the service provided and any legal, safeguarding, insurance, accounting or professional requirements that apply.

When information is no longer required, it will be securely deleted or destroyed.

10. Digital resources and purchases

If you purchase a workbook, guide or other digital resource, I may collect information necessary to process the transaction and provide access to your purchase.

Payment information may be processed by a third-party payment provider. I do not normally receive or store complete payment-card details.

Purchase and accounting records may be retained where required for tax and financial-record purposes.

11. Cookies and website analytics

This website may use cookies or similar technologies to help it function and, where enabled, to understand how visitors use the website.

Essential cookies may be necessary for the website to operate.

Non-essential analytics or marketing cookies will only be used where permitted by law and, where required, with your consent.

Further information about cookies used by this website should be provided through the website’s cookie settings or cookie notice.

12. Links to other websites

This website may contain links to external websites.

I am not responsible for the privacy practices or content of third-party websites. You should review the privacy information provided by those organisations when visiting their websites.

13. Your data protection rights

Depending on the circumstances, UK data protection law gives you rights including the right to:

• ask what personal information I hold about you
• request a copy of your personal information
• ask for inaccurate information to be corrected
• ask for information to be deleted in certain circumstances
• ask for processing to be restricted
• object to certain types of processing
• request transfer of certain information

withdraw consent where processing is based on consent.

These rights are not absolute and some exemptions may apply.

To exercise any of these rights, please contact me using the details at the beginning of this notice.

14. Children’s information and parental responsibility

My services frequently involve children and young people, but this website is primarily intended for use by adults, including parents, carers and education professionals.

Where a parent or carer provides information about a child, they should ensure that they are entitled to provide that information.

As children mature, their own data protection rights and views may also need to be considered.

I aim to handle children’s information particularly carefully and proportionately.

15. Complaints

If you have concerns about how I have handled your personal information, please contact me first so that I have an opportunity to address them.

You also have the right to raise a concern with the Information Commissioner’s Office (ICO), the UK’s independent regulator for data protection.

Information about your data protection rights and how to make a complaint is available from the Information Commissioner’s Office.

16. Changes to this privacy notice

I may update this privacy notice from time to time, for example if my services, website technology or legal obligations change.

The most recent version will always be published on this website with the date of the latest update shown at the top.