Privacy policy

Information we collect

We collect information in a few limited ways:

• Contact and enquiry forms. If you contact us, submit a provision, claim a listing, or make an enquiry to a provider, we collect the details you provide — such as your name, email address, organisation and message.
• Accounts. Schools and providers who register for a dashboard provide an email address and organisation details to sign in.
• Search activity. We log basic, non-identifying details about searches (such as the criteria used and result counts) to understand which needs and locations are under-served, so we can improve coverage.
• Technical information. Standard web server logs (such as IP address and browser type) may be collected automatically for security and reliability purposes.
• Analytics. Google Analytics 4 collects aggregate usage data (pages viewed, referral source, device/browser type and approximate location) so we can understand how the site is used.

How we use it

We use personal information to:

• respond to enquiries, messages and support requests;
• operate accounts, listings, claims and provider submissions;
• review and verify submitted provision information before publication;
• understand gaps in coverage so we can prioritise adding new provision;
• measure site usage with Google Analytics so we can improve the service;
• keep the service secure and prevent misuse.

We do not sell personal information, and we do not use it for advertising.

Information about children

AP Directory is intended for use by parents, carers, professionals and providers — not directly by children. Please do not include identifiable details about a child (such as their name or specific circumstances) in search terms, contact forms or enquiry messages. Where a parent or professional shares such details as part of an enquiry to a specific provider, that information is passed only to the provider concerned, for the purpose of assessing that enquiry.

Sharing your information

We share information only where necessary:

• with a provider you send an enquiry to, so they can respond to you directly;
• with service providers who host and run the site on our behalf, under appropriate confidentiality terms;
• with Google, as the processor for Google Analytics 4 (measurement ID G-YWVZRX1CCR); Google may process this data outside the UK;
• where we are required to by law, or to protect the safety of a child or other individual.

Cookies

We use an essential session cookie to keep you signed in to an account, and Google Analytics 4 cookies to understand how the site is used in aggregate. We do not use advertising or remarketing cookies. See our cookies policy for full details.

Data retention

We keep personal information only for as long as needed for the purpose it was collected — for example, enquiry and contact messages are retained long enough to respond and to keep a reasonable record, then deleted or anonymised. Account information is kept for as long as the account is active.

Your rights

Under UK data protection law, you have the right to:

• ask what personal information we hold about you, and request a copy;
• ask us to correct inaccurate information;
• ask us to delete your information, in certain circumstances;
• object to or restrict certain processing;
• complain to the Information Commissioner's Office (ICO) if you believe your information has been mishandled.

To exercise any of these rights, contact us and we'll respond promptly.

Security

We take reasonable technical and organisational steps to protect personal information against unauthorised access, loss or misuse. No online service can guarantee perfect security, but we work to keep information appropriately protected at all times.

Changes to this policy

We may update this policy from time to time as the service evolves. We'll update the "last updated" date above whenever we make changes.

Contact us

If you have any questions about this policy or how your information is handled, please get in touch.