Privacy Policy

Last reviewed: March 2026
Up To Something Clever is committed to protecting and respecting your privacy. This policy explains how we collect, use, store, and share personal data when you engage with us, either as a family or as an educational institution, and your rights under UK GDPR.

Who is responsible for your data

Up To Something Clever is the data controller for the personal data we collect.

If you have any questions about this policy or how your data is handled, please contact:
sophie@uptosomethingclever.com

What We Do

Up To Something Clever provides:

  • Strength-based assessments and learning profiles for children with neurodivergent learning profiles

  • Online support for parents and caregivers

  • Workshops and online events for parents, caregivers, and educators

  • Professional learning and consultancy for schools and educational institutions

Our work focuses on understanding how children think and learn, and supporting engagement, confidence, and meaningful learning experiences.

The Information We Collect

Families

When you work with us, we may collect:

  • Your name and contact details

  • Your child’s name, age, and school

  • Educational information (such as reports or teacher feedback)

  • Information shared during conversations or assessment sessions

  • Notes and observations created during the process

  • Payment information (processed securely through third-party providers such as Stripe)

Some of this information may include details about a child’s learning differences or neurodivergence. This is considered special category data under UK GDPR.

We only collect and process children’s data with the knowledge and consent of a parent or guardian.

Schools and Educational Institutions

When working with schools or educators, we may collect:

  • School or organisation name and contact details

  • Names and roles of staff involved

  • Information used to tailor workshops or consultancy

  • Feedback from sessions

Website and communications

We may also collect:

  • Email addresses for newsletters or updates (where you have chosen to receive them)

  • Website usage data through cookies and analytics tools

How We Use Your Information

We use personal data to:

  • Deliver strength-based assessments and create learning profiles

  • Provide guidance and recommendations for home and school

  • Plan and deliver workshops, events, and consultancy

  • Communicate with you about your enquiry or booking

  • Send updates or information where you have opted in

  • Maintain records for professional, administrative, and legal purposes

WHy We Are Allowed To Use Your Data

Under UK GDPR, we rely on the following lawful bases:

  • Contract – to deliver services you have requested

  • Consent – for marketing communications or where you choose to share information

  • Legitimate interests – for running and improving our services, where this does not override your rights

Where we process special category data (such as information about neurodivergence), we rely on:

  • Explicit consent provided by a parent or guardian, and

  • The provision of services requested by you, where this information is necessary to deliver the service

Who We Share Your Data With

We only share personal data where necessary and appropriate:

  • With your child’s school or teachers only if you request or authorise this

  • With trusted third-party providers (such as payment processors, email services, video platforms, and secure storage systems)

  • Where required by law

Third-party providers process data on our behalf and are required to keep your information secure and confidential.

We do not sell or share personal data for marketing purposes.

How Long We Keep Your Data

We keep personal data only for as long as necessary:

  • Assessment records and reports are retained for up to 7 years to support professional record-keeping, safeguarding, and any follow-up queries

  • Workshop and booking records are retained for 5 years for administrative and accounting purposes

  • Marketing data is kept until you unsubscribe

Data is securely deleted when no longer required.

How We Keep Your Data Safe

We take appropriate steps to protect personal data, including:

  • Secure digital storage systems

  • Restricted access to information

  • Use of trusted third-party platforms

  • Password protection and device security

International Data Transfers

Some of the third-party providers we use may store data outside the UK. Where this happens, we ensure appropriate safeguards are in place to protect your data.

Your Rights

Under UK GDPR, you have the right to:

  • Access your personal data

  • Request correction or deletion

  • Restrict or object to processing

  • Withdraw consent (where applicable)

  • Request a copy of your data in a structured format

To exercise your rights, contact:
sophie@uptosomethingclever.com

We aim to respond within one month.

You also have the right to complain to the Information Commissioner’s Office (ICO):
https://ico.org.uk

Automated decision-making

We do not use automated decision-making or profiling in relation to personal data.

Cookies and website use

Our website uses cookies to support functionality and understand how visitors use the site. This helps us improve content and user experience.

You can manage cookie preferences through your browser settings.

If you have a concern

If you have any questions about how your data is used, or if something doesn’t feel right, you are always welcome to contact us at:
sophie@uptosomethingclever.com

We will do our best to respond clearly and resolve any concerns quickly and fairly.

Updates to this policy

We may update this policy from time to time. The latest version will always be available on our website.