Legal
Privacy Policy
This policy explains how Senbridge Ltd collects, uses, and protects personal data when you use our website or interact with us. It applies to individuals who submit an enquiry through our contact form, SEND professionals who enquire about working with us, and visitors to our website.
We take data protection seriously. This policy is written to be read, not filed away.
Who we are
Senbridge Ltd is the data controller responsible for your personal data. Senbridge is a SEND workforce consultancy supporting schools, local authorities, and specialist professionals across England and Wales.
124 City Road
London, EC1V 2NX
If you have any questions about this policy or wish to exercise any of your rights, please contact us at privacy@senbridge.co.uk. We will respond within one month.
What personal data we collect
The information we collect depends on how you interact with us.
Contact form submissions. When you contact us through our website, we collect your full name, the organisation you represent, your email address, telephone number (if you provide one), the nature of your enquiry, and any background information you choose to include. Please do not include sensitive personal information, or names or other details that could identify a child, a family, or an individual case.
Professional enquiries. When you enquire about working with Senbridge through the Professionals enquiry form, we collect your full name, email address, and professional discipline. That is the complete list for the initial enquiry. The form has no free-text field, no facility to upload documents, and no account. We do not ask for information about your health, disability, or other sensitive personal matters, and the form has no field for it. If there is information of this kind you would like us to take into account, please raise it directly in conversation.
Website visits. Our hosting provider processes standard server log data as part of normal website operation, including IP addresses, browser type, and pages visited. We also collect anonymised, aggregated data about how visitors use our website through our analytics service.
You are not legally obliged to provide any of this information. If you do not provide the required fields on our contact or Professionals enquiry forms, we will be unable to respond to your enquiry.
How we use your personal data
Contact form enquiries
We use the information you provide to respond to your enquiry and, where relevant, to follow up in the period following initial contact.
The legal basis for this processing is legitimate interests (Article 6(1)(f) UK GDPR). Our legitimate interest is in receiving and responding to business enquiries from organisations considering working with us. We have assessed that this interest is proportionate to the impact on your privacy, given that you have chosen to submit a business enquiry and would reasonably expect a response.
When you submit our contact form, we also send you a brief automatic acknowledgement by email. This is part of the same processing activity.
We keep contact enquiry correspondence in our business systems while we are in contact with you and while there is a realistic prospect of us working together. We review it periodically and delete it once neither of those applies. We do not operate a fixed automated retention schedule for this correspondence. You can ask us to delete it sooner at any time by emailing privacy@senbridge.co.uk.
Professional enquiries
We use the information you provide to respond to your enquiry and to discuss whether we may be able to represent you for SEND engagement opportunities.
The legal basis for this processing is legitimate interests (Article 6(1)(f) UK GDPR). Our legitimate interest is in responding to professionals who have chosen to contact us about representation, and who would reasonably expect a reply. Ticking the acknowledgement box on the form confirms you have read this notice. It is not consent, and we do not use your enquiry for marketing.
Your enquiry is delivered to our business mailbox as an email. Submitting the Professionals enquiry form does not create a professional database or register record. The initial enquiry is received and held as mailbox correspondence, and nothing about it is screened, scored, ranked, or shared with any Local Authority or other client. If your enquiry progresses, we may ask for further information relevant to representation, compliance, or an engagement. We will explain what information is required and how it will be used before it is collected. If you later agree to an introduction, relevant information may be shared as part of that introduction.
Once your enquiry reaches us, we send a short confirmation of receipt to the email address you gave. It is the same message for everyone and repeats none of the details you submitted. This forms part of the same processing activity.
We keep your enquiry in that mailbox while we are in contact with you and while there is a realistic prospect of us representing you. We review professional enquiry correspondence periodically and delete it once neither of those applies. We do not operate an automated retention schedule for this correspondence, and submitting the enquiry form does not add your details to any register or database. You can ask us to delete your enquiry, or to stop contacting you, at any time by emailing privacy@senbridge.co.uk. You also have the right to object to this processing at any time.
Website analytics
We use Vercel Analytics to understand how visitors use our website, including which pages are visited and where visitors come from. Vercel Analytics is designed to be privacy-preserving. It does not use tracking cookies, does not collect identifiable personal data, and does not build profiles of individual visitors. The data we receive is anonymised and aggregated.
The legal basis for this processing is legitimate interests (Article 6(1)(f) UK GDPR). Our interest is in understanding how our website is used so that we can improve it. Given the non-identifying nature of the data collected, we have assessed that the impact on individual privacy is minimal.
Website hosting
Our website is hosted by Vercel Inc. As part of normal website operation, Vercel processes standard server log data, including IP addresses, browser information, and request data, for the purposes of website delivery and security.
The legal basis for this processing is legitimate interests (Article 6(1)(f) UK GDPR).
Who we share your personal data with
We do not sell, rent, or trade personal data. We share it only with the service providers listed below, which process data on our behalf.
Vercel Inc provides our website hosting and analytics infrastructure.
Resend Inc provides our email delivery service. When you submit our contact form or Professionals enquiry form, Resend is used to deliver your submission to us and to send you a confirmation of receipt.
We also process personal data within our internal business systems, such as email, in the ordinary course of business, for example to manage correspondence and business relationships. An initial professional enquiry is held as mailbox correspondence and does not, by itself, create a record in any other system. These systems are used by Senbridge staff and are subject to the same data protection obligations as our external processors.
We may also disclose personal data where we are required to do so by law, including to regulatory bodies, law enforcement agencies, or to our professional indemnity insurers in connection with a legal claim or complaint.
Access to personal data within Senbridge is limited to those who need it in order to carry out their responsibilities.
International transfers of personal data
Our processors Vercel Inc and Resend Inc are incorporated in the United States. When they process personal data on our behalf, they do so under appropriate transfer mechanisms in accordance with UK data protection law.
Vercel’s data processing terms refer to the UK International Data Transfer Addendum (UK IDTA) to the EU Standard Contractual Clauses, and Vercel states that it participates in the UK Extension to the EU-US Data Privacy Framework (the UK-US Data Bridge).
Resend’s data processing terms refer to the UK Addendum to the EU Standard Contractual Clauses, and Resend states that it participates in the UK Extension to the EU-US Data Privacy Framework.
Cookies and browser storage
We do not use advertising or behavioural tracking cookies. Vercel Analytics, the service we use to understand site usage, is designed to be privacy-preserving and does not set tracking cookies.
For details of any browser storage used by this website and guidance on how to manage your browser settings, please see our Cookie Notice.
How long we keep your data
| Data | Retention period |
|---|---|
| Contact form enquiries | Held in our business systems while your enquiry is live and while there is a realistic prospect of working together. Reviewed periodically and deleted once neither applies. No fixed automated period applies. Deleted sooner on request. |
| Professional enquiries | Held as mailbox correspondence while your enquiry is live and while representation remains a realistic prospect. Reviewed periodically and deleted once neither applies. Submitting the enquiry form creates no register or database record, and no fixed automated period applies. Deleted sooner on request. |
| Website server log data | As determined by Vercel’s standard data retention practices |
| Website analytics data | Anonymised and aggregated. Not retained as identifiable personal data. |
Your rights
Under UK GDPR, you have the following rights in relation to your personal data:
Access. You can ask for a copy of the personal data we hold about you.
Rectification. You can ask us to correct personal data that is inaccurate or incomplete.
Erasure. You can ask us to delete your personal data in certain circumstances, including where it is no longer necessary for the purpose for which it was collected.
Restriction. You can ask us to restrict processing of your personal data in certain circumstances.
Objection. Where we process your personal data on the basis of legitimate interests, you have the right to object. We will stop processing unless we can demonstrate compelling legitimate grounds that override your interests, or the processing is necessary for legal claims.
Portability. Where processing is based on your consent or on a contract, you can ask us to provide your personal data in a structured, commonly used, machine-readable format.
Withdrawal of consent. Where we process personal data based on your consent, you can withdraw that consent at any time. This will not affect the lawfulness of processing before withdrawal.
To exercise any of these rights, please contact us at privacy@senbridge.co.uk. We will respond within one month. We may need to verify your identity before acting on a request.
Automated decision-making
We do not use automated decision-making or profiling that produces legal effects or similarly significant effects on individuals.
How to make a complaint
If you are unhappy with how we have handled your personal data, please contact us at privacy@senbridge.co.uk in the first instance.
You also have the right to make a complaint to the Information Commissioner’s Office (ICO), the UK supervisory authority for data protection:
Wilmslow, Cheshire SK9 5AF
Changes to this policy
We may update this policy from time to time to reflect changes in how we use personal data or changes in applicable law. We will publish the updated policy on this page with a revised date.
Contact
For any questions about this policy or to exercise your rights, please contact us: