1. Introduction
Send Sense Advocacy ("we", "us", or "our") is committed to protecting your privacy and personal data. This Privacy Notice explains how we collect, use, store, and protect your personal information in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
This notice applies to all individuals who use our services, visit our website, or otherwise provide us with personal information.
2. Who We Are
Data Controller: Send Sense Advocacy
Contact: Deana Spilletts
Address: 76 Cromwell Road, Rugby, CV22 5LZ
Telephone: 07769 173855
Email: info@sendsenseadvocacy.co.uk
Website: https://sendsenseadvocacy.co.uk/
If you have any questions about this Privacy Notice or how we handle your personal data, please contact us using the details above.
3. What Information We Collect
We collect and process the following categories of personal data:
3.1 Information You Provide to Us
• Contact Information: Name, email address, telephone number, postal address
• Child/Young Person Information: Name, date of birth, school/educational setting, special educational needs and disabilities (SEND) information
• Health Information: Medical diagnoses, health conditions, therapy reports, healthcare professional assessments
• Educational Information: Educational history, attainment data, school reports, Individual Education Plans (IEPs)
• Professional Reports: Educational psychologist reports, occupational therapy assessments, speech and language therapy reports, and medical reports
• Correspondence: Emails, letters, and other communications with us
• Payment Information: Billing address, payment method (we do not store credit card details)
3.2 Information We Collect Automatically
• Website Usage Data: IP address, browser type, pages visited, time spent on pages
• Technical Data: Device information, operating system, referring website addresses
3.3 Special Category Data
We process special category data (sensitive personal information) including:
• Health data relating to physical or mental health conditions
• Information about disabilities
• Racial or ethnic origin (where relevant to SEND assessment)
4. How We Use Your Information
We use your personal data for the following purposes:
4.1 Providing Our Services
• Drafting parental requests for Education, Health and Care (EHC) needs assessments
• Reviewing and analysing assessment reports and educational documents
• Providing advocacy and support services
• Communicating with you about your case
• Corresponding with Local Authorities and other relevant bodies on your behalf
· Case Management for SEND Tribunal Appeals
4.2 Business Operations
• Processing payments and maintaining financial records
• Responding to inquiries and providing customer support
• Maintaining case files and records
• Improving our services and website functionality
4.3 Legal Obligations
• Complying with legal and regulatory requirements
• Responding to legal processes and requests from authorities
• Protecting our legal rights and interests
5. Legal Basis for Processing
We process your personal data based on the following legal grounds:
5.1 Contract Performance
Processing is necessary to perform our contract with you (our engagement letter and terms of service). This includes providing the advocacy services you have commissioned.
5.2 Consent
For special category data (health information, disability information), we rely on your explicit consent, which you provide when engaging our services. You have the right to withdraw consent at any time by contacting us.
5.3 Legitimate Interests
We process certain data based on our legitimate business interests, including:
• Maintaining accurate business records
• Improving our services and website
• Protecting against fraud and misuse of services
5.4 Legal Obligations
We process data where necessary to comply with legal obligations, such as tax and accounting requirements.
6. Who We Share Your Information With
We may share your personal data with:
6.1 Local Authorities
We share relevant information with Local Authority SEND teams when submitting EHC needs assessment requests or other correspondence on your behalf.
6.2 Educational Settings
Where necessary and with your consent, we may communicate with schools, colleges, or other educational settings.
6.3 Healthcare Professionals
With your explicit consent, we may correspond with medical professionals, therapists, or other healthcare providers involved in your child's care.
6.4 Service Providers
We use carefully selected third-party service providers who process data on our behalf:
• Cloud storage providers (for secure document storage)
• Email service providers
• Payment processors
• Website hosting providers
All service providers are required to implement appropriate security measures and process data only as instructed by us.
6.5 Legal Requirements
We may disclose your information if required by law, court order, or to protect our legal rights.
We do not sell or rent your personal data to third parties.
7. How Long We Keep Your Information
We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected:
• Active Client Files: Retained for the duration of our engagement and for 6 years thereafter (in line with standard limitation periods)
• Financial Records: Retained for 7 years from the end of the financial year (HMRC requirement)
• Enquiry Information: If you do not become a client, initial enquiry information is retained for 12 months
• Website Analytics: Anonymized usage data retained for up to 26 months
After these retention periods, we securely delete or anonymize your personal data. You may request earlier deletion, subject to any legal obligations we have to retain certain records.
8. How We Protect Your Information
We implement appropriate technical and organisational security measures to protect your personal data, including:
• Encrypted data storage and transmission
• Password-protected systems and devices
• Secure cloud storage with UK-based servers
• Regular backups of important data
• Limited access to personal data on a need-to-know basis
• Regular review and update of security practices
While we take all reasonable precautions, no method of electronic storage or transmission is 100% secure. If you have concerns about the security of your information, please contact us.
9. Your Rights
Under UK GDPR, you have the following rights regarding your personal data:
9.1 Right of Access
You can request a copy of the personal data we hold about you (known as a Subject Access Request).
9.2 Right to Rectification
You can request that we correct any inaccurate or incomplete personal data.
9.3 Right to Erasure
You can request deletion of your personal data in certain circumstances, subject to legal retention requirements.
9.4 Right to Restrict Processing
You can request that we limit how we use your personal data in certain situations.
9.5 Right to Data Portability
You can request a copy of your personal data in a commonly used electronic format to transfer to another service provider.
9.6 Right to Object
You can object to processing based on legitimate interests or for direct marketing purposes.
9.7 Right to Withdraw Consent
Where processing is based on consent, you can withdraw that consent at any time. This will not affect the lawfulness of processing before withdrawal.
9.8 How to Exercise Your Rights
To exercise any of these rights, please contact us using the details in Section 2. We will respond to your request within one month. We may need to verify your identity before processing your request.
10. Cookies and Website Tracking
Our website uses cookies and similar technologies to improve your browsing experience and analyze website traffic.
10.1 What Are Cookies?
Cookies are small text files stored on your device when you visit a website. They help websites remember your preferences and understand how you use the site.
10.2 Types of Cookies We Use
• Essential Cookies: Necessary for the website to function properly (e.g., security, session management)
• Analytics Cookies: Help us understand how visitors use our website (e.g., Google Analytics)
• Functional Cookies: Remember your preferences and settings
10.3 Managing Cookies
You can control and delete cookies through your browser settings. Please note that disabling certain cookies may affect website functionality. For more information about cookies, visit www.allaboutcookies.org.
11. Third-Party Websites
Our website may contain links to third-party websites. We are not responsible for the privacy practices or content of these external sites. Please review their privacy policies before providing any personal information.
12. Children's Information
As part of our advocacy services, we process information about children and young people with special educational needs. We recognise the importance of protecting children's data and:
• Only process children's data with parental or guardian consent
• Apply additional safeguards when handling children's information
• Ensure children's data is accessed only by authorised individuals
• Delete children's data in accordance with our retention policy
13.International Data Transfers
We primarily store and process your data within the United Kingdom. If we need to transfer data outside the UK, we will ensure appropriate safeguards are in place, such as:
• Adequacy decisions by the UK government
• Standard Contractual Clauses approved by the ICO
• Other mechanisms permitted under UK data protection law
14. Changes to This Privacy Notice
We may update this Privacy Notice from time to time to reflect changes in our practices or legal requirements. The "Last Updated" date at the top of this notice indicates when it was last revised.
Significant changes will be communicated to active clients via email. We encourage you to review this notice periodically when visiting our website.
15. How to Complain
If you have concerns about how we handle your personal data, please get in touch with us first using the details in Section 2. We will investigate and respond to your complaint promptly.
If you remain dissatisfied, you have the right to lodge a complaint with the Information Commissioner's Office (ICO):
Information Commissioner's Office
Wycliffe House
Water Lane
Wilmslow
Cheshire SK9 5AF
Telephone: 0303 123 1113
Website: www.ico.org.uk
16. Contact Us
If you have any questions, concerns, or requests regarding this Privacy Notice or our data protection practices, please get in touch with us:
Send Sense Advocacy
Deana Spilletts
76 Cromwell Road
Rugby
CV22 5LZ
United Kingdom
Telephone: 07769 173855
Email: info@sendsenseadvocacy.co.uk
Website: https://sendsenseadvocacy.co.uk/
END OF PRIVACY NOTICE