Our privacy position
SAR Autism & SEND Academy is operated by SAR Consultancy Ltd. We aim to follow UK GDPR and EU GDPR principles when serving learners in the UK, Europe and international English-speaking audiences.
For the MVP, the learner portal does not ask for learner name, email, diagnosis, support needs, case details or safeguarding information.
Data minimisation
We only collect information needed to provide the service: payments through Stripe, support enquiries by email, and optional marketing signups if added later.
Local browser progress
The current portal stores course progress only in the learner's own browser. This means SAR Academy does not receive or manage that progress data through the portal.
No sensitive learner case data
Learners should not submit private case notes, medical details, safeguarding concerns or identifiable information about children, adults, families, staff or service users through the site.
International learners
International learners should understand that SAR Consultancy Ltd is UK-based and uses third-party tools such as Netlify for hosting and Stripe for payments. Those providers may process data according to their own privacy and data processing terms.
Full platform requirements
Before adding secure student accounts, cloud progress tracking, email automation, certificates with learner names or AI tutor history, the academy should complete a GDPR review covering lawful basis, processor contracts, data retention, security, access controls and international transfers.
Learner rights
Where SAR Academy holds personal data, individuals may have rights to access, correction, deletion, objection or restriction depending on location and applicable law.