Privacy and Data Protection Policy


The SENDNest

1. Purpose of This Policy


This policy explains how The SENDNest collects, uses, stores, and protects personal data. The SENDNest is committed to handling personal information lawfully, fairly, and transparently, with particular care given to data relating to children and special educational needs. This policy applies to all services provided by The SENDNest.


2. Data Controller


The SENDNest is the data controller for all personal data processed in connection with its services.


If you have any questions about how your data is handled, you may contact The SENDNest directly using the contact details provided on the website.


3. Types of Data Collected


The SENDNest may collect and process the following types of personal data:


Parent or carer data

Names, contact details, and communication records

Information relating to advocacy or advisory services

Child or young person data

Name, age, and education setting

Information relating to special educational needs or disabilities

School reports, professional reports, and supporting documentation

Information shared for the purpose of SEND advocacy, screening, or guidance

School or professional data

Contact details

Information relevant to SEND support discussions


This may include special category data relating to health, education, and disability.


4. Lawful Basis for Processing


The SENDNest processes personal data under the following lawful bases:

Consent

Performance of a service or contract

Legitimate interests relating to SEND advocacy and advisory work

Legal obligations where applicable


Special category data is processed only where necessary for the provision of SEND-related services and with appropriate safeguards in place.


5. How Data Is Used


Personal data is used to:

Provide SEND advocacy and advisory services

Prepare reports and written advice

Communicate with families, schools, and professionals

Maintain accurate records of work undertaken

Meet safeguarding and legal obligations


Data is only used for purposes that are relevant and proportionate.


6. Consent


Where consent is relied upon:

Consent will be clear, informed, and recorded

Consent may be withdrawn at any time


Withdrawal of consent may limit the ability of The SENDNest to continue providing certain services.


7. Data Storage and Security


The SENDNest takes appropriate steps to protect personal data, including:

Secure digital storage

Password protection

Restricted access to information


Data is only retained for as long as necessary for the purpose for which it was collected and in line with legal and professional requirements.


8. Information Sharing


The SENDNest does not share personal data without a lawful basis.


Information may be shared where:

Consent has been given

It is necessary to support SEND advocacy or advice

There is a safeguarding concern

There is a legal obligation to do so


Only relevant information is shared, and only with appropriate parties.


9. Safeguarding and Confidentiality


Confidentiality is respected at all times.

However, safeguarding concerns override confidentiality where there is a risk of harm to a child or vulnerable person. This is addressed in more detail in the Safeguarding Policy.


10. Data Subject Rights


Individuals have the right to:

Access their personal data

Request correction of inaccurate data

Request deletion of data where appropriate

Restrict or object to processing

Withdraw consent


Requests relating to data rights should be made in writing.


11. Children’s Data


The SENDNest recognises that data relating to children requires additional protection.


Data relating to children is:

Handled sensitively and confidentially

Collected only where necessary

Accessed only for SEND-related purposes


12. Data Breaches


In the event of a data breach, The SENDNest will:

Take steps to contain and assess the breach

Notify relevant parties where required

Take appropriate remedial action


13. Review of This Policy


This policy is reviewed regularly to ensure: Ongoing compliance with data protection law, continued appropriateness for SEND advocacy work and clear and transparent practice.