Privacy statement

Assess Plan Do Review stores no pupil information and sends no pupil information anywhere. It is a planning tool that runs in the web browser of the member of staff using it.

What happens to what staff type in. Pupil details, notes, targets and photographs are held in the browser's memory only while the page is open. They are not saved on a server, in a database or on the device. They disappear when the page is closed or refreshed, unless a member of staff downloads a plan file to their own device. There are no pupil accounts and no pupil records on our side to keep, share or lose.

Staff accounts for licensed schools. Each licensed school has a staff account. We hold, for each member of staff: their name, school email address, role (main user or staff), the date their login was created and when they last signed in, and their password stored only as a salted, one-way scrambled form (PBKDF2), never as text. For the school we hold its name, the number of logins in its agreement, the licence dates and reference, the contact for the agreement, and the branding the school's main user chooses: name, logo, colours, vision, values, priorities and provision menu. None of this may include pupil information. The lawful basis is the contract with your school (UK GDPR Article 6(1)(b), and legitimate interests for staff who are not party to it, Article 6(1)(f)).

The free demo. To start the 24-hour demo you enter an email address. We keep only a scrambled (SHA-256) form of it with the start and end time, so each address gets one 24-hour demo, and delete it a year after the demo ends. The demo sets one cookie, apdr_d, holding a random code that keeps your demo open for the 24 hours. If you tick the box to hear about a pilot, your name, email and school are emailed to us once so we can reply; the website keeps no copy. Nothing you type into the demo about pupils is saved or sent. The lawful basis is legitimate interests in offering a fair, limited trial, and your consent for the optional pilot email.

Who controls what. Only the school's main user can change the school's branding or remove staff. Each member of staff can see and download the data held about them, change their name and password, and delete their own login. The main user's role can be handed over by contacting us.

Password resets. If you forget your password, we email a single-use link to your school email address. It expires after 30 minutes, works once, and is stored only in scrambled form. We give the same reply whether or not an email address has an account, so the form can't be used to find out who works at a school. Changing your password signs you out everywhere and we email you to say it has changed. If email isn't reaching you, your main user (or we, for a main user) can make a reset link that lasts 24 hours and hand it to you directly. We never send passwords by email and never ask for them.

How long we keep it. Sign-in sessions last 12 hours, or 30 days if you choose to stay signed in. Reset links expire after 30 minutes (24 hours if made by your main user) and are deleted once used. Sign-in attempt counters, used to block guessing, are deleted after an hour. A log of account activity, such as sign-ins, password changes and staff added or removed, is kept for 12 months and contains no passwords or pupil information. When a member of staff is removed or deletes their login, their details are deleted straight away. Staff logins and branding are deleted automatically 90 days after a school's licence ends, unless it is renewed.

Cookies. The public website and the demo set no cookies and use no analytics, advertising or tracking. The school app sets one cookie, apdr_s, only after a member of staff signs in, to keep them signed in. Our admin page sets one cookie, apdr_a, for our own staff, and the demo sets apdr_d as described above. Both are strictly necessary for a service you have asked for, so no consent banner is needed. They are secure, HTTP-only cookies that hold a random code, not personal details.

What the tool does not do. It does not use artificial intelligence or send notes to any outside service. Pupil text is matched to strategies by the browser itself.

What leaves the browser. Only what a member of staff chooses to copy, print or download, such as a plan or profile PDF. These files can contain pupil information, so the school is responsible for storing and sharing them under its own policies.

Technical requests. All files, including fonts and the PDF library, are served from our own domain. Our hosting provider, Cloudflare, receives ordinary technical information such as the IP address of each visit and keeps short-term logs. Cloudflare also sends account emails for us. Staff account details (names and school email addresses), school settings and website content are stored by our hosting provider, Cloudflare, Inc., in its Western Europe region. Cloudflare acts as our data processor under its Data Processing Addendum, which includes the UK International Data Transfer Addendum, and is certified under the EU-US Data Privacy Framework and its UK Extension. Our website is served from Cloudflare's worldwide network, normally from a data centre near you. No pupil information is ever sent to or stored by Cloudflare.

Page counter. The home page of this website keeps a running total of how many times it has been loaded, shown at the bottom of the page. It stores only that number. It sets no cookies and stores no IP addresses or other personal information, and it is never used inside the planner.

Contact form. When you use the contact form on the home page, your name, email address, school, role and message are sent by email to us so we can reply. The website does not keep a copy. To limit spam, a count of messages from each connection is held for one hour and then deleted automatically; this count is not linked to your message. We keep enquiry emails only as long as we need them to deal with your enquiry and any licence that follows. Please never include pupil information in a message.

Your responsibilities. Staff should enter initials rather than full names. The school remains the data controller for anything staff enter and for the files they create, and decides the lawful basis, retention and access.

Contact. SEND Wade (APDR), 62 Saracen Drive, Sutton Coldfield, B75 7HF, [email protected]. How we use information about business contacts is set out in our privacy notice for business contacts below.

Privacy notice for business contacts

This notice explains how SEND Wade (APDR) uses personal information about people we deal with in schools, trusts, nurseries and other organisations: for example SENCos, headteachers, business managers, data protection officers and childminders. It does not cover pupils, because we never hold pupil information.

Who we are. SEND Wade (APDR), 62 Saracen Drive, Sutton Coldfield, B75 7HF, is the controller of the information described here. Contact us at [email protected] about anything in this notice.

What we collect.

• Enquiries: your name, email address, school or organisation, role and message, when you use the contact form, email us or speak to us.
• Demo requests: if you tick the box asking us to get in touch when you start the demo, your name, email address and school are emailed to us. Otherwise we keep only the scrambled form of your email address described above.
• Customers: the school's name, the name and email address of the main contact and of the person who handles invoices, purchase order numbers, the licence you hold and its dates, and our correspondence with you.
• Payments: invoice and payment records. If you pay online, payment is handled by our payment provider, Stripe; we never see or store full card details.
• Prospective customers: work contact details that schools and trusts publish on their own websites, such as a SENCo's name and school email address, and notes of any conversations.

Why we use it, and our lawful basis.

• To reply to enquiries, run demos and pilots, and answer support questions: our legitimate interests in responding to people who contact us and running our business.
• To provide a licence, send invoices and keep accounts: performance of a contract with your school or organisation, and legal obligation for tax and accounting records.
• To tell schools and trusts about Assess Plan Do Review: our legitimate interests in promoting our service to organisations that may need it. We email staff at schools, academies and trusts at their work address only about our service. We email childminders and other sole traders only if they have asked us to or given consent. Every marketing email says who we are and lets you opt out.

Who we share it with. We do not sell your information or share it for others' marketing. We use these service providers, who act for us:

• Cloudflare, Inc.: hosts the website and the staff account database and sends emails from the contact form and the account service, as described above.
• Microsoft: provides the email inbox where enquiries and messages to us arrive.
• Stripe: processes online payments and invoices, when used.

We may also share information with our accountant or professional advisers, or where the law requires it.

International transfers. Some of these providers may process information outside the UK, including in the United States. Where they do, the transfer is covered by UK adequacy regulations, including the UK Extension to the EU-US Data Privacy Framework, or by the UK International Data Transfer Addendum.

How long we keep it.

• Enquiries and prospective customer details: up to two years after our last contact with you, unless you become a customer. If you ask us not to contact you again, we keep only your email address on a do-not-contact list so that we respect that request.
• Customer records and correspondence: for the length of the licence and two years after it ends.
• Invoices, payments and accounting records: for as long as tax law requires, normally six years.
• Staff logins and school settings: deleted 90 days after a licence ends, as described above.

Your rights. You can ask for a copy of the information we hold about you, and ask us to correct it, delete it or restrict how we use it. You can object at any time to our using your information for marketing, and we will stop, and you can object to other uses based on our legitimate interests. Where we rely on your consent, you can withdraw it at any time. Email [email protected] and we will reply within one month.

Complaints. If you are unhappy with how we have used your information, please tell us first so we can put it right. You also have the right to complain to the Information Commissioner's Office (ICO) at ico.org.uk/make-a-complaint or on 0303 123 1113.

Changes. We will update this notice if how we use business contact information changes. Last updated: 29 October 2026.

Questions data protection officers ask

Question	Answer
Does the product store pupil data?	No. Entries live in the browser's memory while the page is open and are gone when it is closed or refreshed. There is no pupil database and no server copy. The only accounts are for staff, holding their name, school email and a scrambled password.
Does it send pupil data anywhere?	No. The page makes requests only to our own domain for its files and your school's settings. Signing in, managing staff and saving the school's branding talk to our account service, which receives no pupil information. Nothing staff type into a plan is sent.
Who is the controller and who is the processor?	The school is the controller of anything its staff enter and of the plans and PDFs they create. Because we never receive or hold pupil information, we do not expect to act as a processor. Your DPO should confirm this view.
What could staff enter?	Free text, so anything: initials, strengths, needs, medical conditions, personal care and safeguarding-related notes, and a photograph. The tool cannot stop a user typing a full name, so staff training and your policy matter. Much of it is special category data once typed.
What is the lawful basis? Is a DPIA needed?	Those are for the school to decide, as for any SEN support plan. The product holds no pupil data, which keeps the risk low, but your wider use (downloaded PDFs, photographs, shared plans) can be included in your own assessment.
Does it use AI, profiling or automated decisions?	No. A keyword matcher in the browser suggests barriers from pasted notes, and staff choose what to use. No decision about a pupil is made by the tool.
Does it use cookies, analytics or tracking?	There are no analytics, advertising or tracking. The school app sets one strictly necessary cookie to keep a member of staff signed in. The only outside file it loads is the open-source PDF reader, from cdnjs, when a member of staff imports a PDF.
What third parties are involved?	None receive pupil information. Cloudflare hosts the website, the staff account database and the account emails, and sees IP addresses and browser details in its logs.
Are there international transfers?	No pupil data is transferred. Staff account details are stored in Cloudflare's Western Europe region. The site is served from Cloudflare's worldwide network, normally from a data centre near the visitor, so short-term technical logs may be processed outside the UK. Any such transfers are covered by Cloudflare's Data Processing Addendum, including the UK International Data Transfer Addendum, and its certification under the EU-US Data Privacy Framework and UK Extension.
How is it secured?	There is nothing to breach on our side because pupil information is never held. The site is served over HTTPS with a strict content security policy, access to each school's app is limited to staff with a login, passwords are stored only as salted PBKDF2 hashes, repeated wrong attempts are blocked, reset links and sessions are stored only in scrambled form, and our admin sign-in needs a password and a code sent by email. Risks that remain are on the school's side: shared computers, downloaded PDFs, photographs and who the files are sent to.
What about retention, access requests and breaches?	We hold no pupil information to keep, disclose, erase or lose. For staff accounts, each member of staff can download their data and delete their login from the app, and we answer other requests within one month. We would tell affected schools without undue delay about any breach of account data. Requests and incidents involving downloaded files are for the school to handle under its own procedures.
What do you hold about us?	Business contact details, enquiry emails, invoices for the licence, and the staff account details described above. Please never send us pupil information, including in support emails or the contact form.
What if the product changes?	We will tell you before any change that would mean storing or sending pupil information, and we will agree a data processing agreement first.