Privacy Policy and GDPR
At Mosaic Inclusion & SEND, I am committed to protecting the privacy of the schools, families, and young people I support. This policy explains how I handle your personal data in plain English.
1. My Role
Mosaic Inclusion & SEND represents a UK-based consultancy dedicated to fostering inclusive educational environments.I act as a 'Data Controller' for the information you provide to me directly, and sometimes as a 'Data Processor' when working on behalf of schools.
2. What data is collect
Data that may be collected: basic contact details (names, emails, phones); professional details from school staff; and sensitive information about children's educational needs, health, or disability status when necessary for my consultancy work.
3. How data is used
Your data is used to: provide specialist advice and training; correspond with families and schools; manage my business relationship with you; and ensure I meet my legal and safeguarding obligations.
4. Lawful Bases
Under GDPR, I rely on: 'Contract' (to fulfill my agreement with you); 'Legal Obligation' (where required by law); and 'Legitimate Interests' (to run and improve my consultancy). For sensitive SEND data, I typically process this for 'Special Category' reasons relating to social protection or explicit consent.
5. Who data is shared with
I do not sell your data. I may share information with: relevant school staff, local authorities (if required for SEN support or EHCPs), and trusted IT service providers who help me run my website and secure storage.
6. International Transfers
Your data is primarily stored within the UK or European Economic Area (EEA) whenever possible. If I use tools based elsewhere (like cloud storage), I ensure they have 'adequacy' protections or standard contractual clauses in place to keep your data safe.
7. How data is kept safe
Industry-standard security measures are used, including encryption, password protection, and secure cloud storage. Access to sensitive SEND information is strictly limited to staff who need it to perform my role.
8. How long data is kept
Data is kept for as long as is necessary for the purposes it was collected, or to meet legal and safeguarding requirements (often up to 7 years for business records or longer for specific safeguarding duties).
9.Your rights (including children)
You have the right to see the data I hold, ask for it to be corrected, or request its deletion. Children and young people have these same rights; where they understand my rights, they can exercise them directly, otherwise, a parent/carer can act on my behalf.
10. Cookies and web tracking
The website uses small files called 'cookies' to function correctly and to help me understand how visitors use my site. You can choose to accept or decline non-essential cookies via my cookie banner when you first visit.
11. Contact details and complaints
If you have any questions or wish to make a complaint, please email me at info@mosiacinclusionsend.co.uk. You also have the right to complain to the Information Commissioner’s Office (ICO) if you are unhappy with how I handle your data.