Privacy

Your information, in plain English

You are being asked to write down some of the most difficult parts of family life. You should know exactly what happens to it.

Who is responsible for your information

Simplified Support Ltd, The Hand Stadium, Davis Lane, Clevedon, BS21 6TG, United Kingdom (registered in England and Wales, company number 16358501, ICO registration number ZC024691) is the data controller for EBSA Support Plan by Simplified Support. If you have a question about your information, or want it corrected or deleted, email Jessica@SimplifiedSupport.co.uk or call 0330 043 0263 and we will respond within one month.

What we store

Your email address, your child's first name or nickname, their age or year group, the answers you give in the discovery journey, anything your child adds in their own words, and the Support Plans and summaries generated from those answers.

Why we store it, and our legal basis

We store your information to provide the service you asked for: keeping your Support Plan available, updating it as things change, and letting you show change over time. Our legal basis is performance of a contract with you for paid features, and your consent for the free snapshot, for anything your child writes, and for non-essential cookies. Some answers may be special-category health information. The appropriate UK GDPR Article 9 condition for that processing is under legal review and requires owner confirmation; this notice does not present an unverified condition as settled. You can remove records or close your account, and you can contact us to withdraw consent where consent applies.

How long we keep it

Your child's records are kept while your account is open. If you delete a child profile, an assessment or your account, the underlying records are deleted rather than hidden. Accounts with no activity for 24 months are deleted along with their records. Basic purchase and refund records are kept for six years because tax law requires it.

Who can see it

Only you, and any co-carer you deliberately invite. Your information is protected at the database level so it can only be read by your account. We never share it with your child's school, your local authority or any other organisation. Nothing is ever sold and it is not used for advertising.

Who processes it for us

We use a small number of providers under contract: Supabase (database, authentication and file storage, hosted in the EU/UK), Cloudflare (website hosting and delivery), Stripe (taking payment - Stripe receives your payment details and basic purchase information, never your child's answers), Zoom (delivering online workshops - if you book a workshop, your name and email are used to admit you to the session), Google Tag Manager and Google Analytics 4 (anonymous website measurement, only if you accept analytics cookies), and our email provider (sending you sign-in, purchase and reminder emails you have asked for). Analytics and advertising systems never receive anything about your child - no names, answers, themes or health information. Some providers may transfer data outside the UK under Standard Contractual Clauses and the UK Addendum.

Cookies and analytics

Essential cookies and similar storage keep you signed in and remember your cookie choice itself - these are always on and cannot be turned off because the site will not work without them. Google Tag Manager and Google Analytics 4 never load until you accept analytics, and Google Consent Mode defaults to denied. Stripe does not load until you allow payments and live workshops and choose to pay. Zoom does not open until you allow that category and select your private joining link. We do not run advertising or marketing tags. You can change your choice at any time using the button below.

Your rights

You have the right to be told what we hold, to get a copy, to have mistakes corrected, to have information erased, to restrict or object to processing, to withdraw consent where consent applies, and to receive your data in a portable format. You can download a portable JSON copy or close your account from My Access. For correction, restriction, objection or anything else, contact us and we will respond within one month, free of charge.

Your child's words

If your child adds anything in the child's voice section, it is stored exactly as they wrote it, never edited, and it is always clearly labelled as theirs when it appears in a Support Plan or summary. You control whether it is included in anything you send to school.

Sharing with school

Nothing is sent anywhere automatically. The school summary is generated for you to read, edit, copy or download. What happens to it after that is entirely your choice.

Deleting your information

You can delete a child profile or assessment from its existing controls, and permanently close your whole account from My Access. Account closure deletes the profile and child records you own, cancels active tracking billing, and does not delete a child another parent owns and shared with you. Basic payment records are retained separately for six years for accounting and tax obligations without child answers; linked workshop booking rows are removed.

Safety

If something you tell us suggests possible risk of harm, the app will show clear signposting to appropriate services. The app itself does not contact anyone on your behalf. We do not routinely monitor or report what families write; we could only ever share information with an authority where the law required us to, for example a court order.

If you are unhappy

Please tell us first and we will try to put it right - our Complaints page explains the full process, who to contact and what happens at each stage. You also have the right to complain to the Information Commissioner's Office (ico.org.uk, helpline 0303 123 1113), the UK regulator for data protection.