SEND UNFOLDED
Privacy policy
Last updated: 25 October 2026
SEND Unfolded is a parent-led website that helps parents and carers in England understand special educational needs and disabilities (SEND) support. This policy explains what information we hold, why, who can see it, and the choices you have. We have written it to be as plain as we can.
Who we are
SEND Unfolded is run by Dan Brydon. We are the controller of your personal information, which means we decide how it is used and are responsible for protecting it.
- Email: privacy@sendunfolded.co.uk
If you have any question about this policy or your information, email us and we will reply within one month.
What information we collect
We only collect what you choose to give us, plus what is needed to run your account.
| What | Examples | Where it comes from |
|---|---|---|
| Account details | Your email address and password (we never see your password; our sign-in provider stores only a secure scrambled version of it), plus sign-in details such as when you last signed in and from what device | You, when you create an account |
| Your children's records | Name or nickname, school, stage in the SEND journey, needs and support, strengths and views, meeting notes, dates, tasks and evidence logs | You, when you add them |
| Evidence files | Letters, reports and other files you upload (PDF, Word, text or images, up to 5 MB each) | You |
| Activity record | A list of actions and times, such as "Created child workspace". It does not copy what you wrote | Created automatically when you save |
| Assistant and letter-drafting questions | What you type into the assistant or letter tool, the recent conversation, any file you choose to attach, and (in the letter tool) the name and school of the child you pick | You, only when you use these tools |
| Usage counts | How many assistant questions and AI letter drafts your account has used each day, to apply the daily limits | Created automatically |
| Reminder settings | If you turn on reminders, a code from your browser that lets us send notifications to your device | Your device, only if you allow it |
| Postcode searches | A postcode you type into the school finder or local support search | You |
| Technical information | IP address, browser type and error logs, kept briefly by our hosting provider to keep the site running and secure | Your device |
Information about your child's health, disability or special educational needs is especially sensitive. The law calls it "special category" data and requires extra care, so we only store it with your permission and protect it more strictly (see below).
We do not use advertising or tracking cookies, and we do not sell your information.
How we use it and why we're allowed to
UK data protection law says we need a lawful reason (a "lawful basis") for each use of your information.
| What we do | Lawful basis |
|---|---|
| Create and run your account, and keep your workspace private to you | Contract: we need it to provide the service you signed up for |
| Store your children's records, dates and evidence files, and show them back to you | Contract, and for health and SEND details, your explicit consent |
| Answer your questions in the assistant and help draft letters | Your explicit consent, given when you choose to use these tools |
| Send reminders you have switched on | Your consent |
| Apply the daily assistant limit, prevent misuse and keep the site secure | Legitimate interests: keeping the service safe and affordable |
| Reply to you when you contact us | Legitimate interests |
| Keep records we are legally required to keep | Legal obligation |
Health and SEND information. Because details about your child's needs are special category data, we only process them with your explicit consent, which you give by ticking the consent box when you add a child. We record when you gave it. You can withdraw consent at any time by deleting the records or your workspace (see "Your rights"). This does not affect anything we did before you withdrew it.
We only use your information to provide SEND Unfolded to you. We do not use it for marketing unless you separately ask us to, and we never use it to make automated decisions about you or your child.
The AI assistant and letter drafting
The assistant and the letter-drafting tool are powered by OpenAI. When you use them:
- Only what you type, the recent conversation and any file you choose to attach are sent to OpenAI to write the answer. In the letter tool, if you choose a child, their name and school are also sent so the letter can include them.
- Apart from that, your saved children's records and Evidence folder are never sent automatically.
- We ask OpenAI not to store the conversation, and OpenAI does not use it to train its models. OpenAI may keep it for a limited time (up to 30 days) to detect abuse.
- We do not keep a copy of your assistant conversations or letter requests. We only keep a count of how many you have used each day.
The assistant gives general information, not medical, legal or professional advice, and it can make mistakes. Please check anything important against official sources or an adviser.
To protect your privacy, share only the detail you need. You can usually describe a situation without using your child's full name.
Who we share it with
We never sell your information or share it with schools, councils or anyone else unless you ask us to or the law requires it. We use a small number of trusted service providers who handle information only on our instructions:
| Provider | What they do | Where |
|---|---|---|
| Cloudflare | Hosts the website, and stores your encrypted records and files | Records and files stored in the EU; web traffic passes through Cloudflare's worldwide network |
| Clerk | Runs sign-in and account security, and sends sign-in and reset codes by email | USA |
| OpenAI | Writes the assistant's answers and letter drafts | USA |
| postcodes.io (Ideal Postcodes) | Turns a postcode you search into a map location | UK |
| Apple, Google or Mozilla push services | Deliver reminders to your device, if you switch them on. Reminders only say "You have an upcoming family event", with no details about your child | Depends on your device |
We may also share information if the law requires it, for example a court order, or if we believe someone is at serious risk of harm.
Transfers outside the UK. Where a provider handles information outside the UK, we make sure it is protected by approved safeguards, such as the UK–US data bridge or the ICO's International Data Transfer Addendum. Email us for details.
How we keep it secure
- Your workspace is private to your account. Every time records are saved or loaded, we check they belong to the person signed in.
- Children's records and evidence files are encrypted before they are stored, and the site only works over a secure (https) connection.
- Records and files are stored in the EU.
- Sign-in uses a password with email verification, handled by a specialist provider.
- Only the founders can access the systems behind SEND Unfolded, and only when needed to fix a problem or act on your request.
No system is completely secure. If a breach ever puts your information at risk, we will tell you and the ICO where the law requires it.
How long we keep it
| Information | How long |
|---|---|
| Children's records, evidence files and activity record | Until you delete them, delete your workspace or close your account |
| Account details | Until you close your account |
| Assistant conversations | Not kept by us |
| Daily assistant and letter-drafting counts | 30 days |
| Reminder settings | Until you switch reminders off or close your account |
| Technical logs | A short period set by our hosting provider (a few days) |
| Accounts not used for 2 years | We will email you first, then delete the account and its records if we don't hear back |
When you delete something, it is removed from SEND Unfolded straight away. Our database provider keeps an encrypted restore history for disaster recovery, so deleted records can remain there for up to 30 days before they are gone for good. Deleted evidence files are removed immediately.
Cookies and storage on your device
We only use cookies that are strictly necessary to keep you signed in and keep your account secure. They are set by our sign-in provider, Clerk. Because they are essential, the law does not require us to ask for consent, but you can block them in your browser settings (you won't be able to sign in if you do).
We do not use analytics, advertising or tracking cookies. If that ever changes, we will ask for your consent first and update this policy.
Your rights
You have the right to:
- See the information we hold about you, and get a copy
- Correct anything that is wrong
- Delete your information
- Take a copy to use elsewhere
- Object to or restrict how we use it
- Withdraw consent at any time
You can do much of this yourself in Workspace settings: edit or delete any record, export your records with "Export workspace records" (evidence files are downloaded separately from each child's Evidence tab), or remove everything with "Delete workspace data". To close your account or for anything else, email privacy@sendunfolded.co.uk. We will respond within one month, free of charge.
About children
SEND Unfolded is for parents and carers aged 18 or over. Children should not create accounts. The information about children on SEND Unfolded is added by their parent or carer, who decides what to include and can delete it at any time.
Complaints
If you are unhappy with how we have handled your information, please tell us first so we can put it right. You also have the right to complain to the Information Commissioner's Office (ICO) at ico.org.uk or on 0303 123 1113.
Changes to this policy
We will update this policy if the way we use information changes. If a change is significant, we will tell you by email or in the app before it takes effect. The date at the top shows when it was last updated.