GDPR and Data Protection Policy for TaraDakin.com

Effective Date: 19 May 2025

Policy Owner: Tara Dakin, Chartered Psychologist (CPsychol), QTS, MSc

Review Date: May 2026

1. Introduction

TaraDakin.com is committed to protecting the privacy and personal data of all individuals, particularly children and families. This policy sets out how personal data is collected, processed, stored, and shared in compliance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

This policy applies to all services provided through TaraDakin.com, including direct work with children, consultancy for schools, and communication with staff, parents, and carers.

2. Data Controller

Tara Dakin is the Data Controller for all data collected through TaraDakin.com and related services.

Contact details:
Email: Tara.dakin@outlook.com
Address: Orchard Barn, Kniveton, Ashbourne, DE6 1JP

3. Data Collection

TaraDakin.com collects only the data necessary to deliver safe, effective services. This may include:
- Personal information (e.g., name, address, contact details)
- Child-related information (e.g., date of birth, EHCP status, SEND needs, safeguarding records)
- Professional contact details of school staff or agencies
- Records of meetings, reports, observations, assessments, and communications
- Website usage data via cookies (see section 9)

Data is collected via:
- Online contact forms
- Email or phone contact
- In-person or virtual meetings
- Documents and reports shared by settings or parents

4. Lawful Basis for Processing

Data is processed under the following lawful bases:
- Consent – where explicit permission has been given
- Legal obligation – to comply with safeguarding and education law
- Vital interests – to protect children at risk
- Public task – performing functions in the public interest (e.g. inclusion support)
- Legitimate interests – for professional operation of services

5. Data Sharing

Personal data will only be shared when:
- Required for safeguarding purposes
- Necessary to fulfil service obligations (e.g., with schools or agencies)
- Mandated by law (e.g., police, social care)
- Explicit consent has been given

All third-party recipients (e.g., schools, NHS professionals) are required to adhere to data protection laws and keep information confidential.

6. Data Security

TaraDakin.com takes appropriate technical and organisational measures to secure personal data, including:
- Use of encrypted, password-protected storage for digital files
- Secure handling and storage of paper records
- Limited access to personal data on a need-to-know basis
- Regular review of data protection practices

7. Data Retention

Personal data will be retained only for as long as necessary:
- Safeguarding records: Retained in line with statutory requirements (up to 25 years or as advised)
- Service records (e.g. reports, emails): Typically retained for 6 years
- Contact details: Deleted when no longer needed or upon request

Data is reviewed annually, and securely deleted or destroyed when no longer required.

8. Your Rights

You have the right to:
- Request access to your data
- Request correction of inaccurate data
- Request erasure (the “right to be forgotten”)
- Object to processing
- Restrict processing
- Data portability (where applicable)
- Withdraw consent (where applicable)
- Lodge a complaint with the Information Commissioner’s Office (ICO)

Requests can be made to tara@taradakin.com and will be responded to within 30 days.

9. Cookies and Website Use

TaraDakin.com may use cookies for site functionality and analytics. These do not collect personal data unless submitted voluntarily. Visitors can manage cookie preferences via their browser.

10. Policy Review

This policy is reviewed annually or in response to changes in legislation, practice, or services.