Skip to main content
Re:Link
Refer

Privacy Policy

Last updated: 12 July 2026

This policy explains how Re:Link ("we", "us", "our") collects and uses personal data when you visit this website or contact us. We are the data controller for the personal data we process. This policy is written to comply with the UK GDPR and the Data Protection Act 2018.

1. What we collect

  • Contact details you give us via our contact or referral forms (name, email, phone number, organisation, and message content).
  • Referral information about a child that a referring professional chooses to share with us.
  • Technical data such as basic server logs (IP address, page URL, timestamp) used to keep the site secure and available.

2. Lawful bases

We rely on the following lawful bases under UK GDPR Article 6:

  • Legitimate interests — responding to enquiries and running our provision.
  • Consent — where you explicitly opt in (for example, submitting a referral).
  • Legal obligation — safeguarding duties and record-keeping.

Where we process special category data about a child (for example SEMH needs), we rely on Article 9(2)(g) — substantial public interest (safeguarding of children).

3. How we use your data

  • To respond to enquiries and referrals.
  • To assess suitability of placement and plan provision.
  • To meet safeguarding and statutory duties.
  • To keep the website secure and functional.

We do not sell your data and we do not use it for advertising or profiling.

4. Sharing

We share information only where necessary — with the referring school or local authority, statutory safeguarding partners, or professional advisers — or where we are required to do so by law.

5. Retention

Enquiry data is kept for up to 12 months. Pupil records are retained in line with statutory guidance for schools and safeguarding record-keeping. Server logs are kept for a short period for security purposes only.

6. Your rights

Under UK GDPR you have the right to:

  • Access the personal data we hold about you.
  • Ask us to correct inaccurate data.
  • Ask us to erase data where there is no ongoing lawful reason to keep it.
  • Restrict or object to processing.
  • Withdraw consent at any time (where consent is the basis).
  • Lodge a complaint with the Information Commissioner's Office (ICO).

To exercise these rights, contact us using the details on our Contact page. You can also contact the ICO at ico.org.uk or on 0303 123 1113.

7. Cookies

We use only strictly necessary cookies. See our Cookie Policy for the full list.

8. Security

We use appropriate technical and organisational measures — encrypted transport (HTTPS), access controls, and staff training — to protect personal data.

9. Changes

We may update this policy from time to time. The "last updated" date at the top of this page shows when it changed.