Privacy Policy

Last Updated: 29 January 2026

Overview

Sense Path is a web application developed by Sense Path Ltd (Company Number: 15785318) designed to assess and understand children's sensory needs for schools and educational institutions.

This Privacy Policy explains how we collect, use, store, and protect personal data when you use the Sense Path application.

Sense Path Ltd is committed to complying with:

• The UK General Data Protection Regulation (UK GDPR)
• The Data Protection Act 2018 (DPA 2018)

Data Controller Relationships

• For school account data: Sense Path Ltd is the Data Controller
• For children's assessment data: The school is the Data Controller, and Sense Path Ltd is the Data Processor

For children's data, schools have primary responsibility for data protection compliance, including obtaining appropriate consents from parents and guardians.

Data We Collect

School Account Data

• School/institution name
• Contact person name
• Email address and password (stored as encrypted hash)
• Subscription and billing information (processed securely by Stripe)
• Technical data: IP addresses, browser type, login timestamps

Children's Assessment Data

• Child identifier (as chosen by the school — may be name, pseudonym, student ID, etc.)
• Responses to 60 sensory behaviour questions (true/false)
• Assessment dates and timestamps
• Generated sensory profiles and recommendations
• Optional notes added by staff

Data We Do NOT Collect

• Date of birth or age
• Photographs or images of children
• Address information
• Medical diagnoses
• Family information

How We Use Data

School Account Data

We use this to provide and manage your account, deliver the service, provide support, and improve the application.

We do not use school data for marketing, sell it to third parties, or use it for any incompatible purpose.

Children's Assessment Data

We process this only on the school's instructions to store data securely, generate sensory profiles, and enable schools to manage assessments.

We do not use children's data for analytics, research, or any purpose beyond providing the service.

Data Storage and Security

All personal data is stored in the European Economic Area (EEA):

• Location: Belgium (Google Cloud region europe-west1)
• Provider: Google Ireland Limited (Firebase/Google Cloud Platform)

We do not transfer personal data outside the UK or EEA.

Security Measures

• Encryption in transit (TLS 1.2+) and at rest (AES-256)
• Passwords hashed using bcrypt
• Role-based access controls
• Multi-factor authentication available
• Automated daily backups retained for 6 months
• Security monitoring, audit logging, and incident response procedures

Data Retention

• During active service: Data retained while your account is active
• Individual records: Schools can delete children's records at any time
• Account closure: All data deleted within 30 days of request
• Backups: Deleted data removed from backups within 6 months

Data Sharing

We do not sell, rent, or trade personal data.

Sub-processors

Not sub-processors (no personal data processed): Sentry (error tracking), Umami (anonymous analytics).

We will notify schools 30 days before engaging any new sub-processor.

Your Rights

School Staff

You can request access to, correction of, or deletion of your personal data at any time by contacting us. We will respond promptly.

Parents and Guardians

If your child's data is processed through Sense Path:

1. Your child's school is responsible for managing your child's data
2. Contact your child's school to exercise rights (access, correction, deletion, etc.)
3. We provide technical support to the school in fulfilling these requests
4. If you have concerns, contact the school first, or contact us

Cookies

Sense Path does not use marketing or tracking cookies. Google Firebase may use essential cookies for authentication.

Complaints

If you have concerns, contact us. You also have the right to complain to the Information Commissioner's Office (ICO) at ico.org.uk or by calling 0303 123 1113.

Contact

For general inquiries and data subject rights requests, contact us.

Postal Address: Sense Path Ltd, 20 Shaw Road, Newhey, Rochdale, England, OL16 4LT

The full Privacy Policy is available on request. This is a summary for user reference.

Version: 2.0 | Last Updated: 29 January 2026

For the complete legal document, contact us.