Your information matters.
This Privacy Policy explains how the National Attendance Portal and Attendance Magazine collect, use and protect personal information. We aim to be transparent, proportionate and responsible in the way information is handled.
Who we are
The National Attendance Portal and Attendance Magazine are trading names of SENDsational Education Ltd.
SENDsational Education Ltd is registered in England and Wales under company number 15833753.
Our registered office is: 71–75 Shelton Street, Covent Garden, London WC2H 9JQ.
For the purposes of UK data protection law, SENDsational Education Ltd will normally be the controller of personal information collected directly through this website.
Information we may collect
The information we collect depends on how you use the Portal. It may include:
Your name, email address, telephone number, organisation and job role where you choose to provide them.
Account information, organisation details, membership status and information required to administer access.
Details connected with purchases, invoices or subscriptions. Payment card information is normally handled by the relevant payment provider rather than stored directly by us.
Emails, enquiries, feedback, survey responses and other communications you send to us.
Information such as browser type, device type, IP address, page activity and security information where generated by the website or its service providers.
Newsletter preferences, cookie choices, language choices and other settings you select.
Interactive tools and attendance resources
Unless a particular tool expressly states otherwise, users must not enter information that identifies a child or young person, safeguarding records, child protection information, medical or health information, detailed case notes, criminal information, or other special-category or highly sensitive personal data into National Attendance Portal interactive tools.
The Portal's interactive resources are intended to support professional thinking, planning, attendance improvement, self-evaluation and general practice. They are not intended to operate as a pupil record, safeguarding system, case management database, clinical record or social care record.
Where a downloadable or browser-based tool allows information to be entered, users are responsible for ensuring that the information they choose to enter is appropriate, lawful and consistent with their own organisation's data protection and safeguarding requirements.
Schools, trusts, colleges, local authorities and other organisations remain responsible for information they process as independent data controllers.
How and why we use personal information
| Purpose | Information | Typical lawful basis |
|---|---|---|
| Responding to enquiries | Contact and correspondence information | Legitimate interests or steps taken at your request before entering a contract |
| Providing membership | Account, organisation and membership information | Performance of a contract |
| Processing purchases | Order, account and transaction information | Performance of a contract and compliance with legal obligations |
| Sending requested updates | Email address and communication preferences | Consent or legitimate interests where permitted by law |
| Improving the Portal | Usage and analytics information | Consent where required for non-essential cookies or similar technologies |
| Protecting our systems | Technical and security information | Legitimate interests and legal obligations |
| Financial and legal administration | Transaction and business records | Legal obligation and legitimate interests |
The precise lawful basis may vary according to the particular activity and relationship concerned.
Who we may share information with
We do not sell personal information.
We may use reputable service providers to help us operate the Portal. Depending on the service being used, these may include:
- website hosting and content-management providers;
- membership and account-management providers;
- payment processors;
- email and communications providers;
- analytics and website-security providers;
- translation or accessibility technology providers;
- providers of embedded video, documents or interactive content;
- professional advisers such as accountants or legal advisers; and
- public authorities where disclosure is required by law.
Service providers should only receive information that is reasonably necessary for the relevant service and are expected to handle information securely and lawfully.
International data transfers
Some technology providers may process information outside the United Kingdom.
Where UK data protection law requires safeguards for an international transfer, we expect the relevant provider or contractual arrangement to use an appropriate lawful mechanism, such as an adequacy regulation, the UK International Data Transfer Agreement, the UK Addendum to approved contractual clauses, or another permitted safeguard.
How long we keep information
We retain personal information only for as long as reasonably necessary for the purpose for which it was collected, including legal, accounting and dispute-resolution requirements.
- membership and account records may be retained while an account is active and for an appropriate period afterwards;
- financial and transaction records may normally be retained for up to six years where required for accounting or legal purposes;
- routine enquiries and correspondence are periodically reviewed and deleted when no longer required;
- marketing information is retained until consent is withdrawn, an objection is made, or the information is no longer needed;
- technical information and cookie-related information is kept according to the purpose and retention period of the relevant technology.
Your data protection rights
Depending on the circumstances, UK data protection law may give you rights to:
- ask for access to your personal information;
- ask us to correct inaccurate information;
- ask for information to be erased;
- ask us to restrict processing;
- object to certain processing;
- receive certain information in a portable format;
- withdraw consent where processing is based on consent; and
- raise concerns about decisions made solely by automated means, where applicable.
These rights are not absolute and may be subject to exemptions or other legal requirements.
We will not normally charge for exercising a data protection right, although the law permits charges or refusal in limited circumstances.
Security
We take reasonable organisational and technical steps designed to protect personal information from unauthorised access, alteration, loss, disclosure or destruction.
No internet service can guarantee absolute security. Users should therefore avoid entering unnecessary personal or confidential information into public or browser-based resources.
If a tool can be used effectively without names, dates of birth, addresses, pupil numbers or other identifiers, do not enter them.
Children and young people
The Portal includes resources intended for children, young people, parents and educational professionals. However, unless a particular service expressly states otherwise, the website is not designed to collect personal information directly from children through its interactive professional tools.
A child or young person should not be encouraged to submit sensitive personal information, safeguarding information or detailed attendance case information through a general website form or interactive resource.
Questions, concerns and complaints
If you have a question about how we use personal information, want to exercise a data protection right, or believe information has been handled incorrectly, please contact us first.
You also have the right to complain to the UK Information Commissioner's Office if you are dissatisfied with the way personal information has been handled.
Changes to this policy
We may update this Privacy Policy when our services, technology or legal obligations change. The latest version will always be published on this page together with its revision date.