Dyslexia South East CIC
Website: www.dyslexiasoutheast.org.uk
Last updated: 1st March 2026

PRIVACY POLICY

1. Who We Are

Dyslexia South East CIC is a Community Interest Company providing dyslexia support, community events and educational resources.

For the purposes of UK data protection law, Dyslexia South East CIC is the data controller of the personal information you provide to us.

If you have any questions about this policy or how we handle your data, please contact:

Email: community@dyslexiasoutheast.org.uk
Postal address: 6 New Park Avenue, TN40 1QR

2. What This Policy Covers

This policy explains how we collect, use and protect personal information when you:

• Register for one of our events, including Dyslexia Cafés
• Purchase products from our online dyslexia kit shop
• Contact us via our website

3. The Information We Collect

A. Event Registrations (e.g. Dyslexia Cafés)

When you register for an event, we may collect:

• Name
• Email
• address
• Telephone number (if provided)
• Organisation or school (if relevant)
• Information about accessibility needs
• Information about the child or young person (if relevant and provided voluntarily)
• Payment details (where events are paid for)

We only collect information that is necessary to run the event safely and effectively.

B. Online Shop Purchases (Dyslexia Kit Shop)

When you purchase from our shop, we may collect:

• Name
• Billing address
• Delivery address
• Email address
• Telephone number
• Order details
• Payment information (processed securely via third-party payment providers)

We do not store full card details on our servers.

C. Website Use

We may also collect limited technical information automatically, such as:

• IP address
• Browser type
• Pages visited
• Cookies (see Section 9)

4. How We Use Your Information

We use your information to:

For Event Registrations:

• Process bookings
• Communicate important event information
• Manage attendance
• Make reasonable adjustments for accessibility
• Ensure safeguarding and health and safety
• Evaluate and improve our events

For Online Shop Orders:

• Process and fulfil your order
• Arrange delivery
• Handle refunds or returns
• Provide customer support
• Meet our legal and accounting obligations

We do not sell your personal data to third parties.

5. Lawful Basis for Processing

Under UK GDPR, we rely on the following lawful bases:

• Contract – to process event bookings and online purchases
• Legitimate interests – to administer and improve our services
• Legal obligation – to comply with tax and accounting laws
• Consent – where you have opted in to receive marketing communications

You may withdraw consent for marketing at any time.

6. Sharing Your Information

We may share your data with trusted third parties where necessary, including:

• Payment processors (e.g. Stripe, PayPal)
• Event booking platforms
• Website hosting providers
• Delivery and courier services
• Accountants or legal advisers where required by law

These organisations process data on our behalf and are required to keep your information secure.

We will only share personal information where it is necessary and lawful to do so.

7. How Long We Keep Your Data

We retain personal data only as long as necessary:

• Event data: typically up to 12 months after the event unless required for safeguarding or accounting purposes
• Financial transaction records: retained for 6 years in line with UK tax law
• Marketing data: until you withdraw consent

Data is securely deleted when no longer required.

8. Children’s Data

Some of our events and products relate to children and young people with dyslexia.

Where information about a child is provided:

• It must be supplied by a parent, guardian or responsible adult
• We only collect what is necessary
• We handle such information with heightened care and confidentiality

We do not knowingly collect personal data directly from children through our website without parental involvement.

9. Cookies

Our website may use cookies to:

• Ensure the site functions properly
• Analyse website traffic
• Improve user experience

You can control cookies via your browser settings.

10. Data Security

We take appropriate technical and organisational measures to protect personal data, including:

• Secure website hosting
• SSL encryption
• Password-protected systems
• Restricted access to personal data
• Use of reputable third-party providers

While we take reasonable steps to protect your data, no online system can be guaranteed completely secure.

11. Your Rights

Under UK GDPR, you have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request erasure of your data
• Restrict or object to processing
• Data portability
• Withdraw consent (where applicable)

To exercise your rights, please contact us using the details above.

If you are unhappy with how we handle your data, you can complain to the Information Commissioner’s Office (ICO):

www.ico.org.uk

12. Marketing Communications

If you opt in to receive updates about future events or products:

• We will only send relevant information
• You can unsubscribe at any time via the link in our emails

We do not add you to marketing lists without your consent.

13. Changes to This Policy

We may update this Privacy Policy from time to time. The latest version will always be published on our website.