Privacy Policy - SENDminds

Last updated: January 20, 2026

1. Who we are
SENDminds is in the process of incorporating as a Community Interest Company (CIC). Our mission is to connect neurodivergent children through shared scientific discovery and peer-matching.

The Data Controller is Sebastian Adrian (Founder). Contact: info@sendeureka.com

2. Data we collect
We collect only the minimum needed for matching:
- Parent/Guardian name and contact details
- Child's first name, age, gender
- General location (e.g., Bromley area)
- Scientific interests

3. How we use your data
We use Google Forms and Google Sheets to store and process responses. Data is used only to:
- Match children with compatible Science Buddies
- Communicate updates on discovery kits and events
- Coordinate local logistics (e.g., partners like Cannon Cars)

4. Children's Data & Parental Consent
The platform is for children under 16 (often under 13). We collect/process children's data only with verifiable parental/guardian consent via our registration/matching process. We do not knowingly collect data from children without consent. If discovered, we delete it immediately.

5. Special Category Data (SEND/Health-related)
We may process special category data (e.g., SEND needs or related interests) only with explicit consent from the parent/guardian. This data is used solely for matching and is protected with safeguards (pseudonymisation where possible, restricted access).

6. Lawful Basis
We process data based on:
- Contractual Necessity (to provide the Science Buddy match)
- Explicit Consent (for special category data and communications)

7. International Transfers
Data may be transferred to Google services in the USA. We rely on Standard Contractual Clauses and Google's Data Processing Addendum for protection.

8. Data Retention
We retain data only as long as necessary:
- Account/consent records: up to 6 years after last activity (legal/tax reasons)
- Matching/communication data: deleted 12 months after last interaction (or sooner on request)

9. Your Rights (UK GDPR)
You have the right to:
- Access your data
- Rectify inaccurate data
- Erase data ("right to be forgotten")
- Restrict processing
- Object to processing
- Portability
- Withdraw consent anytime

To exercise rights, email  info@sendeureka.com. We respond within one month (free in most cases).

10. Security Overview
We use:
- Encryption in transit (TLS) and at rest
- Strict access controls
- Regular reviews
- No unnecessary storage

No system is 100% secure — you should protect your own details.

11. Complaints
Contact us first. If unsatisfied, complain to the Information Commissioner's Office (ICO):  
https://ico.org.uk/make-a-complaint/  
Phone: 0303 123 1113

We may update this policy — changes will be posted here.