Privacy Notice

Who is responsible for your data

Send Parent Hub, a UK-based business, is the data controller for personal data processed through SEND Parent Hub. This means we decide how and why your data is used.

What we collect and why

• Account details (email, password) — to create and secure your account. Legal basis: contract.
• Information you add (children's names, school and EHCP records, assessments, appeal notes, diary entries, which may include health and special educational needs information) — to provide the Service. Legal basis: contract, and your explicit consent for health-related information.
• Diary text sent to the AI Report Assistant — only when you ask for a summary, to produce it. Legal basis: contract and explicit consent.
• Subscription status (plan, renewal dates) — to give you the right access. Legal basis: contract.
• Technical data (IP address, device and browser information, logs) — for security, fraud prevention and fixing problems. Legal basis: legitimate interests.
• Support messages — to help you. Legal basis: legitimate interests.

We do not sell your data or use it for advertising.

Who we share it with

• Service providers who host and run the Service, including our hosting, database and AI processing providers, under contracts that protect your data.
• Paddle.com, our Merchant of Record, for selling the product, managing subscriptions, taking payments, tax compliance and invoicing.
• Professional advisers (such as legal and accounting) where needed.
• Authorities, where the law requires it.

International transfers

Some providers may process data outside the UK. Where they do, we rely on UK adequacy regulations or the UK International Data Transfer Agreement / Standard Contractual Clauses to protect it.

How long we keep it

We keep your data while your account is open. If you close your account, we delete or anonymise it within 30 days, except where we must keep records (such as for tax) for longer.

Security

We use appropriate technical and organisational measures, including encryption in transit, access controls so only you can see your children's records, and limited staff access.

Your rights

Under UK GDPR you can ask to access, correct, delete, restrict or move your data, object to our use of it, and withdraw consent at any time. We will reply within one month. You can also complain to the Information Commissioner's Office (ico.org.uk).

Cookies

We only use essential storage needed to keep you signed in and remember your active child. We do not use analytics or marketing cookies.

Contact

To use your rights or ask a question, contact Send Parent Hub through the Account page in the app.