Transparency

Data and platform transparency

A plain English account of how this website is hosted, where information is stored, how long it is kept and how AI features handle data. Every statement is marked as confirmed in our configuration or awaiting written confirmation.

Draft transparency page, currently in internal review. Statements marked "UNVERIFIED" describe details we will only publish once confirmed in writing against supplier documentation or contracts. This page is set not to appear in search engines while those checks are outstanding. For clinical records, see our privacy notice.

Website hosting

Where the website itself runs and who provides that infrastructure.

Website platform and hosting provider: This website is built and hosted on the Lovable platform. The live site is served from Lovable-managed cloud infrastructure.
Physical hosting location of website infrastructure: The exact regions used by the hosting platform are not recorded in this project's configuration. [CONFIRM BEFORE PUBLICATION: hosting regions and any international transfer safeguards used by the platform provider]
Database provider: Form submissions, member accounts and portal content are stored in a managed cloud database connected to this website (provided through Lovable Cloud).
Physical location of the database and backups: The database region, backup locations and any international transfer safeguards are not recorded in this project's configuration. [CONFIRM BEFORE PUBLICATION: database region, backup locations and transfer mechanism]

Where your information goes when you use this website

The systems that receive information submitted through this site.

Enquiry and registration forms: Form submissions are stored in the website's cloud database and a notification email is sent to our bookings address. Access to submissions is restricted to authorised Sensational Minds staff.
Email delivery provider: Notification emails are sent through the hosting platform's email service. The provider's identity, processing locations and retention of message content are not recorded in this project's configuration. [CONFIRM BEFORE PUBLICATION: email provider name, data locations and retention]
Clinical records (assessment clients): Clinical records are held in WriteUpp, a clinical records platform. We have confirmed with WriteUpp that our account is hosted within the European Union, in Dublin and Amsterdam. WriteUpp acts as a data processor and Sensational Minds remains the data controller. See the privacy notice for the full detail.
WriteUpp sub-processors and transfer safeguards: The current sub-processor list, transfer mechanism, access controls and end-of-contract deletion terms remain to be confirmed against WriteUpp's documentation. [CONFIRM BEFORE PUBLICATION: WriteUpp sub-processors, safeguards, retention and deletion terms]
CV uploads: CVs uploaded through the jobs page are stored in a private storage area that only authorised staff can access. CVs are deleted automatically 12 months after upload unless the applicant joins our team.
Analytics and advertising trackers: This website does not use third-party analytics or advertising trackers. It records privacy-preserving first-party page events (no names or contact details) to understand which pages are useful.

How long information is kept

Retention rules confirmed in the current website configuration.

CV uploads: Deleted automatically 12 months after upload, unless the applicant joins the team.
Enquiry and contact form submissions: A retention period for enquiry submissions is not yet defined in this project's configuration. [CONFIRM BEFORE PUBLICATION: retention period for general, education, corporate and jobs enquiries]
Learning Hub accounts and coaching portal records: Retention and account deletion arrangements are not yet defined in this project's configuration. [CONFIRM BEFORE PUBLICATION: retention and deletion rules for member accounts, progress records and coaching data]
Clinical records held in WriteUpp: Clinical record retention is governed by professional guidance and the privacy notice. The exact period and end-of-contract deletion terms require confirmation. [CONFIRM BEFORE PUBLICATION: clinical record retention period and WriteUpp deletion terms]

Data processing agreements

Contractual arrangements with the organisations that process information on our behalf.

WriteUpp data processing agreement: Whether a signed data processing agreement is in place with WriteUpp is not recorded in this project's configuration. [CONFIRM BEFORE PUBLICATION: DPA status with WriteUpp]
Website hosting platform data processing agreement: The contractual and data processing terms covering the website hosting platform and its cloud database are not recorded in this project's configuration. [CONFIRM BEFORE PUBLICATION: DPA status with the hosting platform]

Artificial intelligence features

Where AI is used on this website and what it can and cannot see.

Whether your information is used to train AI models: The AI features run through the hosting platform's AI gateway. Whether prompts or submitted content are used to train AI models, and any opt-out setting, is not recorded in this project's configuration. [CONFIRM BEFORE PUBLICATION: AI training use and opt-out settings for the AI gateway]
Microsoft Teams transcription: Online appointments are held on Microsoft Teams and conversations may be transcribed in line with our policies, as explained before sessions take place.

Questions about this page

If you have a question about how your information is handled, or you would like any part of this page in a different format, please email bookings@sensationalminds.co.uk or call 01206 586027. Concerns can be raised through our complaints policy.