Privacy Policy

Last updated: September 2026

Diane Easson Consulting is committed to protecting your privacy and handling personal information responsibly.

This privacy notice explains what information I collect, why I collect it, how it is used and stored, and your rights in relation to your personal information.

Who I am

Diane Easson Consulting is an independent consultancy providing support to children, families, schools and other professionals.

For data protection purposes, Diane Easson Consulting is the data controller for the personal information described in this notice.

You can contact me using the contact details provided on this website.

Information I may collect

Depending on the nature of an enquiry or consultancy work, I may collect information including:

  • names and contact details;

  • information provided through website contact forms or email;

  • information about a child’s development, communication, learning, behaviour, education or family circumstances;

  • information relating to health, disability, diagnosis or other developmental needs;

  • reports or information provided by parents, schools, nurseries or other professionals;

  • assessment, observation, consultation and session notes;

  • correspondence and agreed recommendations;

  • invoicing and payment information.

Some of this information, particularly information relating to health, disability or diagnosis, may be classed as special category personal data under UK data protection law.

How I obtain information

Information may be provided directly by you, collected during assessment, observation or consultancy work, or provided by another professional or organisation with appropriate permission.

I aim to collect only information that is relevant to the work being undertaken.

How I use personal information

I may use personal information to:

  • respond to enquiries;

  • discuss and agree appropriate consultancy support;

  • provide assessment, observation, consultation or intervention;

  • prepare reports, recommendations or other agreed documents;

  • communicate with parents, carers and relevant professionals;

  • maintain appropriate professional records;

  • arrange appointments and manage ongoing work;

  • issue invoices and maintain financial records;

  • meet legal, professional or safeguarding responsibilities.

I do not sell personal information or use client information for unrelated marketing purposes.

Lawful basis for using information

The lawful basis used will depend on the reason the information is being processed.

For general personal information, processing may be necessary:

  • to take steps at your request before entering into an agreement;

  • to provide services under an agreed consultancy arrangement;

  • for my legitimate interests in managing and operating the consultancy; or

  • to comply with a legal obligation.

Where it is necessary to process special category information, such as health, disability or diagnostic information, I will also identify an appropriate additional condition under data protection law.

Where I rely on explicit consent, this will be obtained separately and clearly. Explicit consent must be specific and affirmative and can be withdrawn, although withdrawing consent does not affect processing that was lawful before withdrawal.

Sharing information

I will not routinely share identifiable client information with other professionals without permission.

Where appropriate and with parent or carer permission, information may be shared with people involved in supporting the child, such as:

  • schools or nurseries;

  • therapists;

  • health or education professionals; or

  • other professionals agreed with the family.

Information may also need to be disclosed without prior consent where this is required by law or where there is a safeguarding concern or another overriding legal obligation.

Some organisations also process information on my behalf in order for me to operate the consultancy, including providers of website hosting, email and secure digital storage.

Website, email and digital storage

Website enquiries are submitted through Squarespace.

I currently use email services for correspondence and Microsoft OneDrive for secure digital file storage. Digital records may also be stored on my password-protected computer.

Only I have routine access to client information.

Third-party technology providers such as Squarespace, Microsoft and email providers may process information in other countries as part of providing their services. Their own privacy policies provide information about where data is processed and the safeguards they use for international transfers.

Cookies and website analytics

This website uses cookies and similar technologies. Some cookies are necessary for the website to function properly. With your consent, non-essential cookies may also be used to help understand how visitors use the website.

When you first visit the website, you can choose to accept all cookies, decline non-essential cookies, or manage your cookie preferences. You can change your preferences at any time using the Cookie Preferences option on the website.

Squarespace provides the website platform and may process information collected through cookies and website analytics. More information about how Squarespace handles data is available in its privacy documentation.

Paper records

Where paper notes or records are required, they are stored securely and are accessible only to me.

Paper records are securely destroyed when they are no longer required.

How long I keep information

I keep personal information only for as long as it is needed.

As a general rule, substantive client records are retained for five years after the consultancy relationship ends. After this period, they are securely deleted or destroyed unless there is a specific legal, safeguarding or professional reason to retain particular information for longer.

Enquiries that do not lead to consultancy work will normally be deleted when they are no longer required.

Financial and accounting information may be retained for the period required by applicable tax and accounting obligations.

UK data protection law does not prescribe one fixed retention period for all personal information; organisations are expected to be able to justify their retention periods and delete or anonymise information when it is no longer needed.

Keeping information secure

I take reasonable steps to protect personal information from loss, misuse, unauthorised access or disclosure.

These measures include password-protected devices, secure digital storage, restricted access to client information and secure storage and destruction of paper records.

Your rights

Depending on the circumstances, you may have rights including the right to:

  • ask what personal information I hold about you;

  • request a copy of your personal information;

  • ask for inaccurate information to be corrected;

  • ask for information to be deleted in certain circumstances;

  • ask for processing to be restricted;

  • object to certain uses of your information; and

  • withdraw consent where consent is the basis for processing.

Some rights are subject to legal limitations and may not apply in every circumstance.

To exercise any of these rights, please contact me using the contact details on this website.

Complaints

If you have concerns about how your personal information has been handled, please contact me first so that I can try to resolve the issue.

You also have the right to make a complaint to the Information Commissioner’s Office (ICO), the UK regulator for data protection.

Changes to this policy

This privacy policy may be updated from time to time to reflect changes in my practice, services, technology or legal requirements.