Privacy Notice

The data controller is Simplified Support Ltd (company number 16358501), registered office: The Hand Stadium, Davis Lane, Clevedon, BS21 6TG, United Kingdom. You can contact us about your personal data at Jessica@SimplifiedSupport.co.uk or by telephone on 0330 043 0263.

Simplified Support Ltd is registered with the Information Commissioner's Office (ICO) under reference ZC024691, and we pay the annual data protection fee required of data controllers. You can check our entry on the public ICO register at ico.org.uk/ESDWebPages/Search by searching for our name or registration number.

We collect the following personal data:

• Account data — your name and email address when you create an account.
• Purchase data — your subscription plan, payment confirmation and billing receipts. We do not see or store your full card number — payment is handled by our payment processor (see section 7).
• Learning data — the courses and modules you start or complete, your progress and any certificates issued.
• Contact messages — the content of any email or form message you send us.
• Technical data — basic information such as your browser type and the pages you visit, used to keep the site running.

We do not knowingly collect more data than is listed here. We never ask for your full payment card details, government ID numbers, or your password in plain text.

We process your personal data under the following lawful bases in the UK GDPR:

• To provide the service you asked for (contract, Article 6(1)(b)) — creating your account, giving you access to the courses you have paid for, tracking your progress and issuing certificates.
• To meet our legal obligations (Article 6(1)(c)) — keeping financial and tax records we are required to keep by law.
• For our legitimate interests (Article 6(1)(f)) — running and improving the platform, keeping it secure, preventing misuse, and understanding which courses are used. These are our interests as a business, and we balance them against your rights — we only process what is necessary.
• With your consent (Article 6(1)(a)) — for any optional marketing emails and for non-essential cookies. You can withdraw consent at any time without losing access to your paid courses.

Special-category data is sensitive personal data such as health, racial or ethnic origin, or information about a person's SEND needs. Our training is general professional development and you do not need to enter any child's or family's personal details to complete a course.

We do not knowingly collect special-category data through this website. If a course or reflective activity asks you to note examples, please do not enter identifiable information about a real child or family.

To confirm: If any future feature will collect SEND, health or other special-category data (for example EHCP-related activities), tell us so we can identify an Article 9 condition, complete a Data Protection Impact Assessment (DPIA), and update this notice before that feature goes live.

This service is aimed at education and SEND professionals, not at children. We do not knowingly collect personal data from anyone under the age at which they can use online services without parental consent.

To confirm: The minimum age for an account needs to be confirmed. Tell us the age you want to set (for example 13, 16 or 18) and whether a parent or guardian must consent for younger learners, and we will state it here.

We only keep your personal data for as long as we need it:

• Account and learning data — kept while your account is active, and for 12 months after you close it, so we can answer queries and issue replacement certificates.
• Purchase and financial records — kept for 6 years from the end of the tax year, to meet tax and accounting requirements.
• Contact messages — kept for up to 12 months after we resolve your query.
• Marketing consent — kept until you withdraw consent or ask us to delete it.

After these periods, we delete or anonymise your data. If we need to keep data for longer to comply with a legal obligation or to establish, exercise or defend a legal claim, we will do so.

To confirm: These retention periods are sensible defaults — please confirm they match your actual practice, and we will adjust them.

We use trusted third parties to run the service. Each acts as a processor on our instructions and only uses your data to provide the service we have asked them to provide. We do not sell your personal data.

• Website hosting and platform — the company that hosts this website and stores your account and learning data on our behalf.
• Payment processing — when checkout is live, your card payment is handled by our payment provider. We receive a confirmation and do not store your full card details.
• Email — the provider that sends our transactional and (where you consent) marketing emails.

To confirm: The specific provider names and their processing locations need to be confirmed once each service is connected, so we can name them and address any international-transfer safeguards here.

We will only share your data with anyone else if we are required to by law, or to protect the rights, property or safety of our users or others.

Some of the processors above may process data outside the UK. Where that happens, we rely on recognised safeguards such as UK adequacy decisions or standard contractual clauses, so your data is protected to UK standards.

To confirm: This will be made specific once the providers and their locations are confirmed.

Under the UK GDPR and Data Protection Act 2018, you have the right to:

• be informed about how we use your data (this notice);
• access your personal data and get a copy;
• ask us to correct inaccurate or incomplete data;
• ask us to delete your data in certain circumstances;
• ask us to restrict or stop processing your data;
• ask for your data to be moved to another service (portability);
• object to processing based on legitimate interests or for marketing;
• withdraw consent at any time, where we rely on consent (this does not affect processing that has already happened).

To use any of these rights, email Jessica@SimplifiedSupport.co.uk with your name and the email on your account. We will respond within one month, and we will not charge a fee unless your request is repeated or unfounded.

We use a small number of essential cookies to keep the website working. Any non-essential cookies — such as analytics or marketing — are only set with your consent. When you first visit, a cookie banner asks you to accept all, reject optional cookies, or manage your preferences (analytics, marketing). You can change your choice at any time using the "Cookie settings" link in the footer. See our Cookie Policy for the detail.

To confirm: No analytics or marketing cookies are currently set. If you add one later, tell us the provider name so we can name it in the Cookie Policy before it goes live.

We take reasonable steps to protect your personal data, including limiting access to people who need it, using secure connections (HTTPS) and keeping our systems up to date. No method of storing or sending data is completely secure, but we work to keep the risk as low as possible.

We may update this notice from time to time. We will show the current version on this page with the date above and, for significant changes, let you know through the website or by email.

If you have a concern about how we handle your data, please contact us first at Jessica@SimplifiedSupport.co.uk and we will try to put it right. You also have the right to complain to the Information Commissioner's Office (ICO), the UK's independent regulator, at ico.org.uk/make-a-complaint or by calling 0303 123 1113.