Legal
Privacy Policy
This policy explains how Senbridge Ltd collects, uses, and protects personal data when you use our website or interact with us. It applies to individuals who submit an enquiry through our contact form, SEND professionals who register their interest in working with us, and visitors to our website.
We take data protection seriously. This policy is written to be read, not filed away.
Who we are
Senbridge Ltd is the data controller responsible for your personal data. Senbridge is a SEND workforce consultancy supporting schools, local authorities, and specialist professionals across England and Wales.
124 City Road
London, EC1V 2NX
If you have any questions about this policy or wish to exercise any of your rights, please contact us at privacy@senbridge.co.uk. We will respond within one month.
What personal data we collect
The information we collect depends on how you interact with us.
Contact form submissions. When you contact us through our website, we collect your full name, the organisation you represent, your email address, telephone number (if you provide one), the nature of your enquiry, and any background information you choose to include.
Professional registrations. When you register your interest in working with Senbridge, we collect your full name, email address, professional discipline, and a description of your professional background and practice (optional). We ask that you do not include information about your health, disability, or other sensitive personal matters in the free-text field. If there is information of this kind you would like us to take into account, please raise it directly in conversation.
Website visits. Our hosting provider processes standard server log data as part of normal website operation, including IP addresses, browser type, and pages visited. We also collect anonymised, aggregated data about how visitors use our website through our analytics service.
You are not legally obliged to provide any of this information. If you do not provide the required fields on our contact or registration forms, we will be unable to respond to your enquiry or process your registration.
How we use your personal data
Contact form enquiries
We use the information you provide to respond to your enquiry and, where relevant, to follow up in the period following initial contact.
The legal basis for this processing is legitimate interests (Article 6(1)(f) UK GDPR). Our legitimate interest is in receiving and responding to business enquiries from organisations considering working with us. We have assessed that this interest is proportionate to the impact on your privacy, given that you have chosen to submit a business enquiry and would reasonably expect a response.
When you submit our contact form, we also send you a brief acknowledgement by email. This is part of the same processing activity.
We hold contact enquiry data for 24 months from the date of submission, after which it is deleted.
Professional registrations
We use the information you provide to assess whether we can represent you for SEND engagement opportunities and to contact you about roles that may be relevant to your practice.
The legal basis for this processing is your consent (Article 6(1)(a) UK GDPR). You provide this consent when you submit the registration form. You have the right to withdraw your consent at any time by emailing privacy@senbridge.co.uk. Withdrawing consent does not affect the lawfulness of any processing that took place before withdrawal.
When you register, we also send you a confirmation email. This forms part of the same consent-based processing activity.
We hold professional registration data for 36 months from the date of registration. At 24 months, we will contact you to ask whether you wish to remain on our register. If you confirm, we will hold your details for the remaining period. If we do not hear from you within a reasonable time following that contact, we will delete your data.
Website analytics
We use Vercel Analytics to understand how visitors use our website, including which pages are visited and where visitors come from. Vercel Analytics is designed to be privacy-preserving. It does not use tracking cookies, does not collect identifiable personal data, and does not build profiles of individual visitors. The data we receive is anonymised and aggregated.
The legal basis for this processing is legitimate interests (Article 6(1)(f) UK GDPR). Our interest is in understanding how our website is used so that we can improve it. Given the non-identifying nature of the data collected, we have assessed that the impact on individual privacy is minimal.
Website hosting
Our website is hosted by Vercel Inc. As part of normal website operation, Vercel processes standard server log data, including IP addresses, browser information, and request data, for the purposes of website delivery and security.
The legal basis for this processing is legitimate interests (Article 6(1)(f) UK GDPR).
Who we share your personal data with
We do not sell, rent, or trade personal data. We share it only with the service providers listed below, each of which processes data on our behalf under a written Data Processing Agreement.
Vercel Inc provides our website hosting and analytics infrastructure.
Resend Inc provides our email delivery service. When you submit our contact or registration form, Resend is used to deliver your submission to us and to send you a confirmation.
We also process personal data within our internal business systems, including email and CRM systems used to manage enquiries and professional relationships. These systems are used by Senbridge staff in the ordinary course of business and are subject to the same data protection obligations as our external processors.
We may also disclose personal data where we are required to do so by law, including to regulatory bodies, law enforcement agencies, or to our professional indemnity insurers in connection with a legal claim or complaint.
Access to personal data within Senbridge is limited to those who need it in order to carry out their responsibilities.
International transfers of personal data
Our processors Vercel Inc and Resend Inc are incorporated in the United States. When they process personal data on our behalf, they do so under appropriate transfer mechanisms in accordance with UK data protection law.
Vercel complies with the UK International Data Transfer Addendum (UK IDTA) to the EU Standard Contractual Clauses, as set out in Schedule 3 of their Data Processing Agreement. Vercel Inc is also certified under the UK Extension to the EU-US Data Privacy Framework (the UK-US Data Bridge).
Resend complies with the UK Addendum to the EU Standard Contractual Clauses, as set out in Section 6.4 of their Data Processing Agreement. Resend Inc is also certified under the UK Extension to the EU-US Data Privacy Framework.
Cookies and browser storage
We do not use advertising or behavioural tracking cookies. Vercel Analytics, the service we use to understand site usage, is designed to be privacy-preserving and does not set tracking cookies.
For details of any browser storage used by this website and guidance on how to manage your browser settings, please see our Cookie Notice.
How long we keep your data
| Data | Retention period |
|---|---|
| Contact form enquiries | 24 months from submission, then deleted |
| Professional registration data | 36 months from registration. Reconfirmation requested at 24 months. Data deleted if reconfirmation is not received. |
| Website server log data | As determined by Vercel’s standard data retention practices |
| Website analytics data | Anonymised and aggregated. Not retained as identifiable personal data. |
Your rights
Under UK GDPR, you have the following rights in relation to your personal data:
Access. You can ask for a copy of the personal data we hold about you.
Rectification. You can ask us to correct personal data that is inaccurate or incomplete.
Erasure. You can ask us to delete your personal data in certain circumstances, including where it is no longer necessary for the purpose for which it was collected.
Restriction. You can ask us to restrict processing of your personal data in certain circumstances.
Objection. Where we process your personal data on the basis of legitimate interests, you have the right to object. We will stop processing unless we can demonstrate compelling legitimate grounds that override your interests, or the processing is necessary for legal claims.
Portability. Where processing is based on your consent or on a contract, you can ask us to provide your personal data in a structured, commonly used, machine-readable format.
Withdrawal of consent. Where we process personal data based on your consent, you can withdraw that consent at any time. This will not affect the lawfulness of processing before withdrawal.
To exercise any of these rights, please contact us at privacy@senbridge.co.uk. We will respond within one month. We may need to verify your identity before acting on a request.
Automated decision-making
We do not use automated decision-making or profiling that produces legal effects or similarly significant effects on individuals.
How to make a complaint
If you are unhappy with how we have handled your personal data, please contact us at privacy@senbridge.co.uk in the first instance.
You also have the right to make a complaint to the Information Commissioner’s Office (ICO), the UK supervisory authority for data protection:
Wilmslow, Cheshire SK9 5AF
Changes to this policy
We may update this policy from time to time to reflect changes in how we use personal data or changes in applicable law. We will publish the updated policy on this page with a revised date.
Contact
For any questions about this policy or to exercise your rights, please contact us: