Privacy policy

1. Who we are

This privacy policy explains how My School View Ltd (“we”, “us”, “our”) collects and uses personal data.

My School View Ltd is a company registered in England and Wales (company number 17097860). Our registered office is 71-75 Shelton Street, London WC2H 9JQ.

We are registered with the Information Commissioner's Office. Our registration number is ZC110115.

For any questions about this policy, contact us at:

• Email: privacy@myschoolview.co.uk
• Post: Privacy team, My School View Ltd, 71-75 Shelton Street, London WC2H 9JQ

2. The two roles we play

We process personal data in two different roles, depending on whose data we're handling.

As a data controller, we determine how and why personal data is used. This applies to:

• Visitors to our website (myschoolview.co.uk)
• People who sign up to our newsletter
• People who contact us via the contact form, by email, or by phone
• People who apply to be a founding school
• People who book demos through our calendar tool

As a data processor, we process personal data on behalf of schools that use SENDCo View. This applies to:

• Pupils whose data is held in SENDCo View
• Parents and carers using the parent portal
• School staff who use SENDCo View

The school is the data controller for pupil and parent data within SENDCo View. The school's privacy policy and the Data Processing Agreement between us govern that processing. This privacy policy covers our website and our direct relationships only.

3. What data we collect (as a controller)

Visitors to our website

When you visit myschoolview.co.uk, we collect limited technical data to keep the site running:

• IP address (anonymised before logging)
• Browser type and version
• Pages visited and time spent
• Referring page

We use Vercel Analytics for this. It's a privacy-friendly tool that doesn't use cookies for tracking and doesn't share data with advertisers.

Newsletter subscribers

If you subscribe to our newsletter, we collect:

• Email address
• The date you subscribed
• Whether you've opened our emails (engagement)

This data is held by Buttondown, our newsletter provider, and by us in our customer records.

Contact form submissions

If you contact us via the website form, we collect:

• Your name
• Your email address
• Your school name (if provided)
• The content of your message

This data is held in our customer records and used to respond to your enquiry.

Founding school applicants

If you apply to be a founding school via Typeform, we collect:

• Your name and contact details
• Your school's name and details
• Information about your school's SEND provision
• Anything else you choose to share in the application

Demo bookings

If you book a demo via Cal.com, we collect:

• Your name and email
• The time you booked
• Any notes you add

4. How we use your data (as a controller)

We use your data for the following purposes, with the lawful bases listed:

• To respond to your enquiry (lawful basis: legitimate interests, or contract preparation if you've applied to be a founding school)
• To send you our newsletter (lawful basis: consent — given when you subscribed, withdrawable at any time)
• To run our analytics (lawful basis: legitimate interests — minimal, privacy-respecting, no cookies)
• To process your founding school application (lawful basis: contract preparation)
• To improve our website and product (lawful basis: legitimate interests)
• To comply with our legal obligations (lawful basis: legal obligation — for example, tax records, ICO registration)

We do not use your data for advertising, profiling, or any form of automated decision-making with legal effect.

5. How long we keep your data

6. Who we share your data with

We don't sell your data. We don't share it with marketers. We use a small number of sub-processors to run our service:

We may also share your data with:

• Our legal, accounting, and professional advisers (under their own duties of confidence)
• Law enforcement or regulators if required by law

7. International transfers

We don't transfer your data outside the UK or EU. All sub-processors listed above operate within UK or EU jurisdictions and apply UK/EU data protection standards.

If this changes (for example, we add a sub-processor outside the UK/EU), we'll update this policy and put appropriate safeguards in place (such as Standard Contractual Clauses).

8. Your rights

Under UK GDPR, you have the right to:

• Access your data — ask us what we hold about you
• Correct inaccurate data
• Delete your data (“right to erasure” — limited where we have a legal obligation to retain)
• Restrict processing — pause our use of your data while you contest something
• Object to processing — particularly for legitimate-interests processing or marketing
• Data portability — receive your data in a machine-readable format
• Withdraw consent — for any processing based on consent
• Lodge a complaint with the Information Commissioner's Office (ico.org.uk or 0303 123 1113)

To exercise any of these rights, contact us at privacy@myschoolview.co.uk. We'll respond within 30 days.

9. Cookies

We use a minimal set of functional cookies. We don't use marketing cookies, advertising cookies, or third-party tracking cookies.

For full details, see our cookie policy.

10. Security

We take security seriously. The technical and organisational measures we use include:

• Encryption in transit (TLS 1.3)
• Encryption at rest (AES-256)
• UK-region hosting
• Multi-factor authentication for all staff with data access
• Regular security training for staff
• Annual third-party penetration testing
• Incident response procedures

If we ever experience a personal data breach that affects you, we'll notify you in line with UK GDPR (within 72 hours of becoming aware where required).

11. Children's data

We process pupil data on behalf of schools (as a processor — see the DPA). On our website (where we act as a controller), our service isn't directed at children. We don't knowingly collect personal data from anyone under 16 through our website.

12. Changes to this policy

We'll update this policy from time to time. The “last updated” date at the top will reflect the most recent change. For material changes, we'll notify subscribers by email.

13. Contact us

For any privacy questions:

• Email: privacy@myschoolview.co.uk
• Post: Privacy team, My School View Ltd, 71-75 Shelton Street, London WC2H 9JQ

To make a complaint to the ICO:

• Website: ico.org.uk
• Phone: 0303 123 1113