Privacy Notice
NJE Assessment & Learning Support
Last updated: August 2026
NJE Assessment & Learning Support is committed to protecting your privacy and handling personal information securely and responsibly.
This Privacy Notice explains what information I collect, why I collect it, how it is used and stored, who it may be shared with, how long it is retained and your rights in relation to your personal information.
Who I am
NJE Assessment & Learning Support is owned and managed by Sonya Huxley and provides specialist assessment and learning support services for children and young people, including diagnostic assessment for dyslexia and other literacy and learning assessments.
For the purposes of UK data-protection legislation, NJE Assessment & Learning Support is the data controller for the personal information it collects and processes.
Contact details
NJE Assessment & Learning Support
Email: nje.assessment@gmail.com
Telephone: 07500 332965
Website: www.njeassessment.co.uk
What information I collect
The information collected will depend upon the service being provided but may include:
the child's or young person's name, date of birth and other identifying information;
parent/carer names and contact details;
information about education and school history;
information about reading, writing, spelling, learning and development;
information about previous or current support and intervention;
relevant medical, developmental, sensory or health information;
information about diagnosed or suspected special educational needs, disabilities or other conditions;
family history relevant to learning or development;
information provided by a school, teacher, SENDCO or other professional;
parent/carer and school questionnaires;
assessment results, standardised scores and test responses;
observations and notes made during an assessment or support session;
copies of relevant reports or documents provided to me;
the child's or young person's views where appropriate;
correspondence relating to the service provided;
consent and contractual information; and
payment and invoicing information.
I aim to collect only information that is relevant and necessary for the service being provided.
Where information comes from
Most information is provided directly by the parent/carer or person commissioning the service.
Where appropriate and with the necessary permission, information may also be obtained from:
the child or young person;
their school or educational setting;
teachers or SENDCOs;
other professionals involved with the child;
existing reports or records provided for consideration.
Information supplied by another person or organisation will only be used where it is relevant to the service being provided.
Why I use personal information
Personal information may be used to:
respond to enquiries;
arrange and provide assessments or specialist support;
understand a child's background and learning history;
administer and score assessments;
interpret assessment findings;
prepare assessment reports and recommendations;
communicate findings to parents/carers;
provide specialist teaching or intervention;
liaise with schools or other professionals where permission has been given;
manage appointments, payments and business records;
respond to questions or concerns following an assessment;
meet professional, insurance, safeguarding, legal and regulatory responsibilities.
My lawful basis for using personal information
Under the UK General Data Protection Regulation (UK GDPR), I must have a lawful basis for processing personal information.
Depending upon the circumstances, I may rely on:
Contract – where processing is necessary to provide an assessment, tuition or other service that has been requested.
Legitimate interests – where it is necessary for the appropriate administration and operation of NJE Assessment & Learning Support, maintaining appropriate professional records, responding to queries and protecting or defending professional interests, provided these interests do not override the rights and interests of the individual.
Legal obligation – where I am required to process or retain information to comply with a legal requirement.
Consent – where consent is the appropriate basis for a particular use of information, for example certain disclosures to third parties.
The lawful basis used will depend upon the reason the information is being processed.
The ICO requires privacy information to identify the lawful basis used for processing personal information.
Special-category information
Some information provided during an assessment may be considered special-category personal data under UK GDPR. This may include information concerning health, disability or medical/developmental history.
Where special-category information is necessary for the assessment or service being provided, I will only process it where an appropriate condition under Article 9 of UK GDPR applies.
Where appropriate, I will rely on explicit consent to process relevant special-category information for the specified assessment or support purposes.
You will be informed about the information required and how it will be used as part of the assessment/consent process.
Special-category information will only be collected where it is relevant and necessary. The ICO requires organisations processing this type of information to identify both an Article 6 lawful basis and an appropriate Article 9 condition.
Children's information
Most of the assessment services provided by NJE Assessment & Learning Support relate to children and young people.
Where a parent or person with appropriate parental responsibility commissions an assessment, information about the child will be collected and processed for the purposes of providing that service.
Children and young people will be involved appropriately in the assessment process and information will be explained to them in a way appropriate to their age and understanding.
Their privacy and confidentiality will be respected throughout the assessment process.
Sharing information
Assessment information will not routinely be shared with third parties without appropriate permission.
The completed report will normally be provided to the person who commissioned the assessment.
With appropriate permission, information or reports may also be shared with, for example:
the child's school or educational setting;
a SENDCO or teacher;
another professional involved with the child;
another organisation specifically requested by the parent/carer.
There may be exceptional circumstances where information needs to be shared without consent, for example where there is a safeguarding concern, legal obligation, court order or other lawful requirement.
I may also use trusted service providers to support the secure operation of the business, such as email, secure electronic storage, website hosting, payment/accounting or other IT services. Where these providers process personal information on my behalf, appropriate data-protection and security arrangements will be considered.
Sending reports electronically
Assessment reports and other sensitive documents may be sent electronically where appropriate.
Reasonable security measures will be used to protect personal information during storage and transmission. This may include password protection or other appropriate security measures.
Where a password is used to protect a report, the password will normally be communicated separately.
How information is stored and protected
I take appropriate measures to protect personal information from unauthorised access, accidental loss, alteration or disclosure.
Depending upon the type of record, these measures may include:
secure, access-controlled electronic storage;
strong passwords and multi-factor authentication;
encryption and device security;
secure backup and recovery arrangements;
locked storage for paper assessment records;
use of coded client references where appropriate; and
restricting access to assessment records.
Private-client assessment information is kept separately from records relating to my employment in other settings.
How long I keep information
I do not keep personal information indefinitely. Different types of records are retained for different periods according to their purpose.
Assessment working papers and associated records are normally retained securely for six years following completion of an assessment. These may include completed test record forms, written responses, scoring information, assessment notes, relevant questionnaires, consent records and significant professional correspondence.
Final assessment reports relating to children and young people are normally retained securely until the individual reaches 24 years of age.
Routine administrative correspondence is deleted when it is no longer required.
Financial and accounting records are retained in accordance with applicable HMRC requirements.
Records may be retained beyond their normal retention period where there is an ongoing or anticipated complaint, legal matter, insurance claim, safeguarding matter, professional-body requirement or another lawful reason for continued retention.
When records are no longer required, paper records are confidentially destroyed and electronic records are securely deleted in accordance with the relevant storage arrangements.
The ICO requires organisations to specify their retention periods, or the criteria used to determine them, within their privacy information.
Your data-protection rights
Depending upon the circumstances and the lawful basis being used, you may have rights including:
the right to be informed about how personal information is used;
the right of access to personal information held about you or your child;
the right to rectification where information is inaccurate or incomplete;
the right to erasure in certain circumstances;
the right to restrict processing in certain circumstances;
the right to object to certain types of processing;
the right to data portability in certain circumstances; and
rights relating to automated decision-making and profiling.
Not every right applies in every situation.
For example, a request for information to be deleted does not necessarily mean that all records must immediately be erased where there is a lawful and legitimate reason for continuing to retain them.
The ICO confirms that the rights available depend partly upon the lawful basis being relied upon.
Your right to object
Where I rely upon legitimate interests as the lawful basis for processing your personal information, you have the right to object to that processing in certain circumstances.
Please contact me if you wish to exercise this right.
Withdrawing consent
Where processing is based upon your consent, you have the right to withdraw that consent at any time.
Withdrawal of consent does not affect the lawfulness of processing that took place before consent was withdrawn.
Please be aware that where particular information is necessary to carry out an assessment or provide a requested service, withdrawing consent for its use may mean that I am unable to continue providing that service.
Accessing your information
If you would like to ask what personal information I hold, request a correction or exercise another data-protection right, please contact:
Sonya Huxley
NJE Assessment & Learning Support
nje.assessment@gmail.com
07500 332965
I may need to verify your identity before releasing personal information.
Concerns or complaints
If you have concerns about how your personal information has been handled, please contact me in the first instance so that I have an opportunity to address your concerns.
You also have the right to make a complaint to the Information Commissioner's Office (ICO), the UK's independent data-protection regulator.
Information Commissioner's Office – make a data protection complaint
Changes to this Privacy Notice
This Privacy Notice will be reviewed regularly and updated where necessary to reflect changes in legislation, professional guidance, services or the way NJE Assessment & Learning Support processes personal information.
The date at the top of this notice will show when it was last updated.
Contact
Reach out for assessment or learning support
Phone
07500332965
© 2025. All rights reserved.