Senc0.Back to site
Legal

Privacy notice

Last updated: September 2026 · Questions: hello@senc0.com

Who we are

The controller and processor.

Senc0. is a professional tool for Special Educational Needs Co-ordinators in UK primary schools, provided by Senc0 (“we”, “us”). When your school uses Senc0., the school is the data controller for pupil and staff records. Senc0. acts as the data processor, operating strictly on the school’s documented instructions. For purchase and licensing information we are the controller in our own right.

Purchases

What we hold when you buy a licence.

When a school pre-orders or buys a licence we collect the school name, the buyer’s name, work email address and local authority, together with the payment reference and the amount paid. We use this to grant access, to support the account, and to meet our accounting and tax obligations. The lawful basis is performance of a contract, and legal obligation for the accounting records.

Our order process is conducted by our online reseller Paddle.com. Paddle.com is the Merchant of Record for all our orders and is a recipient of your purchase data. Paddle handles payment, billing, sales tax and refunds, and holds your card details; we never see or store them. See Paddle’s privacy notice.

We keep purchase records for seven years after the end of the relevant financial year, as UK tax law requires, then delete them.

Cookies

What we set in your browser.

We use essential storage only: a sign-in session, your saved filters, and the settings that keep the app working. We set no advertising cookies and run no third-party ad networks. Our reseller sets its own cookies during checkout, governed by its notice above.

What we collect

The minimum we need.

  • Staff sign-in details: name, school email, role. Used to authenticate and to record who made a change.
  • Pupil data entered by school staff: UPN, name, DOB, year group, SEND status, concerns, APDR cycles, provision allocations.
  • Usage telemetry: coarse event counts (page views, feature use) to diagnose errors. No third-party ad networks.
Lawful basis

Why we can hold this.

For staff: legitimate interest in running the service the school has contracted. For pupil records: public task (UK DfE SEND Code of Practice) performed by the school, with Senc0. as a processor under a Data Processing Agreement.

Sharing

Who sees what.

Pupil records are visible only to authenticated staff at your school. We do not sell data, share with advertisers, or use pupil data to train AI models. Sub-processors (hosting, email delivery, error reporting) are listed in our Data Protection page and kept to the minimum.

Retention

How long we keep it.

Pupil records are retained while your school’s subscription is active. On termination, schools receive a 30-day portability window to export all data, after which records are deleted from live systems within 30 days and from backups within 90 days.

Your rights

What you can ask for.

Under UK GDPR, data subjects have the right to access, rectify, erase, restrict, or port their personal data, and to object to processing. Requests should be made to the school (the controller). We will assist the school in responding within one calendar month.

Contact

Getting in touch.

For questions about this notice, email hello@senc0.com. To raise a concern with a supervisory authority, contact the UK Information Commissioner’s Office at ico.org.uk.