Privacy Policy

Last updated: 27 September 2025

1. About Us

This Privacy Policy explains how edvocat limited (“we”, “our”, “us”) collect, use, and protect your personal information.

  • Registered in England & Wales: Company No. 15977148
  • Registered office: 4 Tilesford, WR10 2LA, United Kingdom
  • Email: edvocatuk@gmail.com
  • ICO Registration: ZB998784

2. Information We Collect

  • Contact details – name, email, phone number, address
  • Membership & billing – payment details (processed securely via Stripe/Squarespace)
  • Case information – documents you supply relating to your child’s SEND needs
  • Technical data – cookies, analytics, IP address, device/browser type

3. How We Use Your Data

  • To provide services you request (memberships, hourly support, resources)
  • To manage payments and billing
  • To send service updates, newsletters, and relevant SEND information (opt-out any time)
  • To improve our services and website
  • To comply with legal obligations (e.g. tax, safeguarding)

4. Lawful Basis

We process personal data under the following lawful bases under UK GDPR:

  • Contract: To deliver services you purchase
  • Consent: For communications and optional data sharing
  • Legal obligation: To comply with regulatory and record-keeping duties
  • Legitimate interests: To improve services and maintain security

5. Data Sharing & Third Parties

We only share personal data where necessary:

  • Service providers: Squarespace (website hosting), Stripe (payments), Google Workspace (email/docs), cloud storage
  • Legal requirement: if required by law, court order, or safeguarding duty
  • We never sell or trade your personal data

6. Data Security

We use reasonable technical and organisational measures to protect data, including secure passwords, encryption, and limited access. However, no system is 100% secure and we cannot guarantee absolute security.

7. Data Retention

  • Membership/contact data: kept while you are a member, and up to 6 years for legal/accounting purposes
  • Case documents: normally deleted within 12 months after services end unless required for legal reasons
  • Newsletter lists: kept until you unsubscribe

8. Your Rights

Under UK GDPR, you have the right to:

  • Access the personal data we hold about you
  • Request correction of inaccurate data
  • Request erasure of data (“right to be forgotten”)
  • Restrict or object to certain processing
  • Data portability (receive your data in a structured format)
  • Withdraw consent at any time (e.g. unsubscribe)

To exercise these rights, email us at edvocatuk@gmail.com. You may also complain to the ICO (ico.org.uk).

9. Cookies & Analytics

Our website uses cookies to improve your experience and help us understand how visitors use the site. Cookies are small files stored on your device. They may include:

  • Essential cookies – required for site functionality (cannot be switched off)
  • Analytics cookies – to measure traffic and performance (Squarespace Analytics, Google Analytics)
  • Preference cookies – to remember settings such as language or display

You can manage or disable cookies via your browser settings. Non-essential cookies will only be set if you give consent via our cookie banner.

10. International Data Transfers

Some third-party providers (e.g. cloud/email services) may store data outside the UK/EEA. We ensure appropriate safeguards (such as UK adequacy decisions or standard contractual clauses) are in place.

11. Updates to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with a new “Last updated” date. Material changes will also be notified by email where appropriate.

12. Contact

For questions or data requests, contact us at:

edvocat limited
Registered office: 4 Tilesford, WR10 2LA, United Kingdom
Company No. 15977148 • ICO Reg. ZB998784
Email: edvocatuk@gmail.com