Privacy Policy

This privacy policy applies to all services provided by Next Step Assessments, including training, consultancy, teaching, and assessment services. If you are considering using my services for minors, this policy covers both adult and minor service users.

Who Am I and What Do I Do?

I’m Sallyanne McNamara, the Managing Director of Next Step Assessments Ltd. My business address is Lutton Lodge Farmhouse, Spalding, PE129WA. I’m a dyslexia and dyscalculia specialist teacher, tutor, and assessor. I offer a range of services including consultancy, training, teaching, and assessments.

For my business operations, including insurance, employment, finance, and legal obligations such as ICO registration, I act as a data controller. I am registered with the Information Commissioner’s Officer (ICO) under registration number ZC124936.

For services provided on behalf of other training providers or for the assessment and teaching of minors, I act as a data processor and use personal information under the strict instructions of those contracts.

What Personal Information Do I Collect and Why?

I collect two types of information:

1. Non-Identifiable Information: This includes data gathered through the use of my website, such as pages viewed, questionnaires, online browsing behaviour, clicks, and other actions. This information helps improve my website and services but does not identify you.

2. Personal Information: I collect personal information when

necessary to deliver services, communicate with you, or ensure payment. Personal information may include:

· Full name, email address, physical address, role, and place of work.

· Payment information.

· Details necessary to deliver services, such as school information, staff names, roles, and contact details.

· For teaching and assessment of minors: names, health, educational background - SEN, and developmental information.

In some cases, with permission, I may collect additional information from third parties, such as schools, parents, or professionals of those involved with the individual being assessed or taught with consent.

What Allows Me to Use Your Information?

I use your personal data under the following conditions:

– For adults: under a contract we have entered into for services, based on the legitimate interests of my company in providing those services.

– For minors: with explicit consent from parents or guardians and based on the professional and legal obligations required in the field of teaching and assessment.

Why you collect and use the data (purpose)

The data is used for the following:

· assessment,

· reporting,

· invoicing,

· safeguarding.

Lawful basis for processing

I am processing data lawfully UK GDPR guidelines, for purposes such as:

· Contract

· Consent (especially for minors)

· Legal obligation

· Legitimate interests (where applicable)

How Is Your Information Stored?

All information I collect is securely stored using the following methods:

· Secure servers provided by my ICT service provider, ResolveIt.

· Data related to training and consultancy is stored on a secure

OneDrive account and backed up on an encrypted solid-state drive.

· Sensitive information related to minors for teaching and

assessment is also stored using the above methods and physical test papers are kept in a locked filing cabinet for at least 3 months post-assessment.

· I will store scanned information pertaining to the assessment on a secure folder in OneDrive for sharing purposes on our secure OneDrive.

Information may be stored outside of the UK but within the EU. I do not store data outside the secure systems provided by third-party service providers.

How Long Will I Keep Your Information?

I will retain your personal information for as long as is necessary for the purposes set out in this policy or as required by law:

· For adult services, data is kept for as long as the contract allows or until consent is withdrawn unless I need to retain it for legal reasons (e.g., financial records).

· For teaching and assessment of minors, data is required to be kept until the individual turns 25 in accordance with legal obligations.

Your Rights

You have several rights regarding your personal information, including:

· The right to access the data I hold about you.

· The right to have your data corrected.

· The right to have your data erased (subject to legal requirements).

· The right to restrict or object to how your data is used.

To exercise any of these rights or if you have any questions about how I use your information, please contact me at

Who Do I Share Your Information With?

Routinely, it is only me and my ICT service provider, ResolveIt, who will have access to your information. However, I may need to share your information with the following:

· Insurance Providers (Howden Insurance): They are a separate data controller but handle your information confidentially as per our contract.

· Accountants (Holly Wheatley):** While unlikely, they may occasionally need access to limited information. They act as processors and are bound to confidentiality.

For teaching and assessment, I may need to contact other professionals, such as schools or medical practitioners, but only with prior permission from the parents or guardians.

Withdrawing Your Consent

You have the right to withdraw your consent for me to hold or use your personal information. To do so, please contact me via email or post. Please note that I am required by law to retain certain data for legal and accounting purposes, which may limit my ability to fully erase your data.

How to Get in Touch

If you have any questions or would like to contact me regarding your rights or the use of your personal data, please use the contact information below:

Email: sally@nextstepassessments.co.uk

Phone: 01553607400

Last Modified: April 2026