Privacy Notice

Data Lead: Deborah Daisley-Hayes

Privacy Notice: D.L. Hayes Education Services Ltd.

Last Updated: May 7, 2026

1. Introduction

D.L. Hayes Education Services Ltd. ("we," "us," or "our") is committed to protecting the privacy and security of your personal data. This policy outlines how we collect, use, and store your information, whether gathered through our digital platforms or via physical paper documentation.

2. The Data We Collect

We collect and process personal information, including:

  • Identity & Contact Data: Names, addresses, emails, and phone numbers.

  • Educational Data: Progress reports and assessment results.

  • Special Category Data: This includes highly sensitive information such as health data, medical conditions, and Special Educational Needs (SEN) records.

3. Lawful Basis for Processing

We process standard personal data under the basis of Contractual Necessity or Legitimate Interests.

For Special Category Data, we process this under:

  • Explicit Consent: We will obtain your clear, written permission to process health or SEN data.

  • Substantial Public Interest: Specifically relating to the provision of statutory education and safeguarding.

4. How We Collect Your Data

  • Direct Interaction: Information provided by parents, guardians, or students via online forms or paper enrolment packs.

  • Third Parties: We may receive SEN or medical records from previous schools or local authorities (with your consent).

5. Data Security (The "Double-Lock" Standard)

Because we handle sensitive health and SEN data, we apply enhanced security:

  • Paper Data: Physical SEN files are kept in locked, fireproof storage accessible only by authorised personnel.

  • Online Data: Sensitive files are stored on secure, encrypted cloud servers with Two-Factor Authentication (2FA).

  • Disposal: All sensitive paper data is destroyed via cross-cut shredding once the retention period ends.

6. Data Retention

We retain educational and SEN records in line with UK Department for Education (DfE) guidelines. For students with SEN, records are often kept until the individual reaches the age of 25 to comply with statutory limitation periods.

7. Your Legal Rights

Under the UK GDPR, you have the right to access, correct, or erase your data, and the right to withdraw consent for processing sensitive data at any time (though this may impact our ability to provide tailored educational support).

8. Contact Details

Entity: D.L. Hayes Education Services Ltd.

Email: dlhayeseducation@gmail.com

Address: 124-128 City Road, London, EC1V 2NX