Privacy Notice
Who we are
Indigo Iris Insights Ltd is the data controller for the personal information described in this notice. This means that we decide why and how personal information is used.
Indigo Iris Insights Ltd
Company registered in England and Wales No. 17371929
Email: hello@IndigoIrisInsights.com
Phone: 079 3594 7329
What information we collect
To provide assessment and related services, we may collect information about the child or young person, their parents or carers and, where relevant, other family members, education staff or professionals.
This may include:
-
Names and contact details.
-
Date of birth, education setting, year group and languages.
-
Developmental, educational and family background information.
-
Health, disability, diagnosis, medication, access and support information where relevant.
-
Information about strengths, learning, behaviour, emotions, sensory experiences and communication.
-
Assessment responses, scores, observations, interpretations, reports and professional notes.
-
Booking, payment, correspondence and consent records.
-
Optional research information, such as parent or carer education and county or local authority, where research permission has been given.
Most information is provided by parents or carers through forms, questionnaires, conversations and documents. We also obtain information directly from the child during assessment. Information from schools or other professionals is obtained only where this is relevant and appropriately authorised.
Why we use your information
We use personal information to:
-
Provide and prepare for the assessment and any related services you have requested.
-
Analyse assessment information and prepare reports and recommendations.
-
Manage appointments, payments and administration.
-
Communicate with you about the service.
-
Meet legal, safeguarding, insurance and professional obligations.
-
Manage complaints or concerns.
-
Monitor and improve the quality of our services.
-
Undertake research where separate permission has been given.
Our lawful bases under UK data protection law include performing our contract with you, taking steps at your request before entering into a contract, complying with legal obligations and our legitimate interests in providing and managing our services.
Where we process health or other special category information, we rely on an appropriate additional condition under UK data protection law, including explicit consent where this is required
Children and young people
We recognise that children and young people require particular protection.
We collect only information that is relevant to the service and explain assessment activities in a way that is appropriate to the child's age and understanding. We take account of their wellbeing, views and willingness to participate throughout the assessment.
Who we may share information with
We do not sell personal information.
Information may be shared, where necessary, with:
-
The parent, carer or person commissioning the service.
-
Indigo Iris professionals involved in providing the service.
-
IT, email, cloud storage, payment, accounting or other service providers acting on our behalf.
-
A school or other professional where a separate service has been requested and appropriate authorisation has been provided.
-
Professional supervisors, advisers, insurers or legal advisers where necessary.
-
Safeguarding authorities, emergency services, courts or other organisations where disclosure is required or permitted by law.
We share only the information that is necessary for the relevant purpose.
How we protect your information
We use appropriate technical and organisational measures to protect personal information, including restricted access, secure business accounts, multi-factor authentication, secure devices, backups and procedures for checking recipients before information is sent.
Reports are normally sent as PDF files to the email address you have provided. You may request a password-protected report or another available method of delivery.
How long we keep information
Assessment records relating to children and young people are normally retained until the young person reaches 25 years of age, or for eight years after the assessment, whichever is later.
This allows Indigo Iris to maintain an appropriate professional record of the assessment and respond to later queries, complaints, legal matters or professional requirements relating to the service.
Some information may need to be retained for a different period where required by law, professional guidance, insurance requirements or an ongoing complaint or legal matter. Financial and administrative records may also be subject to different statutory retention periods.
At the end of the relevant retention period, identifiable information will be securely deleted or effectively anonymised unless there is a lawful reason to retain it for longer.
Information that has been effectively anonymised so that individuals are no longer reasonably identifiable may be retained for research, statistical or service evaluation purposes.
Optional research and service improvement
If you have questions or concerns about how Indigo Iris uses personal information, please contact:
Indigo Iris Insights Ltd
Email: hello@IndigoIrisInsights.com
You also have the right to complain to the Information Commissioner's Office.
Information Commissioner's Office: ico.org.uk
Your rights
Depending on the circumstances and the lawful basis for processing, you may have the right to:
-
Access personal information we hold about you or your child.
-
Ask us to correct inaccurate information.
-
Ask us to delete information in certain circumstances.
-
Ask us to restrict how information is used.
-
Object to certain uses of information.
-
Receive certain information in a portable format.
-
Withdraw consent where processing relies on consent.
-
Complain about how personal information has been used.
These rights are not absolute. We may sometimes need to retain or use information because of legal, safeguarding, professional or other lawful requirements.
Requests concerning a child or young person will be considered in light of their age, understanding, interests and rights
Questions or complaints
Participation in research is entirely optional and will not affect the assessment or any other service you receive.
Where you give permission, information from the assessment may be prepared for research and service improvement. Direct identifiers will be removed, and the information will be processed so that individuals are not reasonably identifiable.
You may withdraw your permission before the information has been effectively anonymised. Once information has been effectively anonymised and can no longer reasonably be linked to you or your child, it cannot be withdrawn.
Changes to this notice
We may update this Privacy Notice when our services, systems or legal obligations change.
Last updated: 19 August 2026