Privacy Policy
- Home
- Privacy Policy
NDPP Privacy Policy
Version: 4.0
Effective Date: 01 January 2026
Our Commitment to Privacy, Trust and Ethical Infrastructure
At NDPP, privacy is part of operational trust and relational integrity.
The information shared with NDPP is handled carefully, proportionately and responsibly, in line with our commitment to psychologically literate, neurodiversity-informed and ethically designed systems.
NDPP works across education systems, digital platforms, AI-supported environments and organisational infrastructure. Our approach to data protection reflects the same principles that guide our systems architecture work:
clarity
proportionality
containment
predictability
interpretive trust
responsible governance
This policy explains how NDPP collects, uses, stores and protects personal data across consultancy, systems architecture, digital infrastructure and professional services work.
NDPP is not a therapeutic, diagnostic or clinical service and does not provide ongoing family-facing intervention.
Our Values
Recognition before explanation.
We begin with what organisations are already experiencing.
Not frameworks.
Not theory.
Not services.
People recognise their own situation before they understand NDPP’s explanation.
Understand before recommending.
We don’t begin by suggesting more training, more communication or more process.
We first seek to understand what is making those actions necessary.
Because improving conditions is usually more valuable than increasing effort.
Look beyond the visible problem.
Visible problems are important.
They are rarely the whole story.
NDPP investigates the conditions producing recurring patterns, not just the outcomes those patterns create.
Information answers what.
Understanding answers why.
Improve conditions, not people.
People often work remarkably hard to keep organisations functioning.
NDPP focuses on understanding what the system is asking people to do before asking people to do more.
Because sustainable organisations improve conditions rather than increasing human effort.
Design for different minds.
The same experience is rarely experienced the same way.
Different experiences reveal different things about products, platforms, learning environments and organisational systems.
NDPP designs for participation, confidence and clarity across a wide range of human experiences.
Better explanations create better decisions.
Everything NDPP does is driven by one belief.
Organisations make better decisions when they better understand what they are experiencing.
That understanding shapes where they invest.
What they redesign.
And what they choose to leave alone.
Who We Are
NDPP is a relational systems architecture and infrastructure design practice working across:
education systems
EdTech and AI-supported environments
governance and operating models
workflow and decision architecture
organisational complexity and escalation systems
NDPP supports organisations to strengthen containment capacity, interpretive clarity and operational sustainability under pressure.
Contact Details
Email: admin@ndpp.co.uk
Website: www.ndpp.co.uk
Telephone: 07865 374065
For the purposes of UK data protection law, NDPP acts as a Data Controller for most personal data processed directly through NDPP services.
Where NDPP is commissioned by schools, trusts, organisations or commercial partners, NDPP may act as a Data Processor under the instruction of the contracting organisation.
What Information We Collect
The type of information collected depends on how you engage with NDPP.
Consultancy, Systems Architecture & Organisational Design
This may include:
names and professional contact details
organisational roles and responsibilities
project documentation
workflow or governance materials
operational insight gathered through meetings or reviews
anonymised or aggregated system information
project notes and architecture records
Digital Systems, EdTech & AI Infrastructure Work
This may include:
professional contact information
platform or workflow documentation
anonymised user insight or behavioural patterns
architecture reviews and product feedback
operational workflow information
design and systems-mapping materials
NDPP does not routinely collect identifiable child or learner data.
Where learner-related information is reviewed as part of commissioned work, this is typically:
anonymised
aggregated
operationally limited
processed under the lawful basis of the commissioning organisation
Training, Speaking & Professional Learning
This may include:
attendee names and contact details
accessibility or reasonable-adjustment information
booking and invoicing information
feedback and evaluation data
Website & Digital Interaction Data
NDPP may collect limited technical information through website and analytics tools, including:
browser type
device information
pages visited
basic usage behaviour
cookie preferences
Please see the NDPP Cookie Policy for further information.
How Information Is Collected
Information may be collected:
directly through contact forms, meetings, emails or contracts
through professional referrals or commissioning organisations
via secure digital platforms used for bookings, communication or collaboration
through website interaction and analytics tools
How and Why We Use Personal Data
NDPP processes personal data only where there is a lawful basis to do so.
This may include:
| Purpose | Lawful Basis |
|---|---|
| Delivering consultancy and architecture services | Contract |
| Managing professional relationships | Legitimate Interest |
| Improving NDPP services and systems | Legitimate Interest |
| Meeting legal or financial obligations | Legal Obligation |
| Managing accessibility requirements | Consent |
| Professional communication and scheduling | Legitimate Interest |
Sensitive or special category information is handled only where necessary and with appropriate safeguards.
AI, Digital Systems & Operational Insight
As NDPP increasingly works across AI-supported and digital environments, some projects may involve examination of:
workflow behaviour
operational patterns
interpretive pathways
platform-generated signals
escalation conditions
anonymised user interaction patterns
NDPP does not use AI systems for automated decision-making about individuals.
Any AI-supported tools used operationally by NDPP are used to support analysis, drafting or systems interpretation and are subject to human oversight and professional judgement.
NDPP does not sell personal data to AI systems or third parties.
How We Store and Protect Information
NDPP takes appropriate technical and organisational measures to protect personal data.
This includes:
secure cloud-based systems
encrypted digital storage where appropriate
restricted access controls
secure password management
GDPR-aligned confidentiality practices
minimisation of unnecessary data retention
Paper records are avoided wherever possible. Where physical records exist, they are securely stored and destroyed appropriately.
How Information May Be Shared
NDPP shares information only where necessary, proportionate and legally appropriate.
This may include:
contracting organisations involved in commissioned work
trusted service providers operating under confidentiality obligations
legal or regulatory authorities where required by law
NDPP does not:
sell personal information
trade data
use personal information for unrelated marketing activity without consent
International Data Transfers
Some digital service providers used by NDPP may process data outside the UK.
Where this occurs, NDPP ensures appropriate safeguards are in place, including:
UK GDPR compliance mechanisms
Standard Contractual Clauses (SCCs)
appropriate provider-level security protections
Data Retention
NDPP retains information only for as long as reasonably necessary.
Typical retention periods include:
| Data Type | Retention Period |
|---|---|
| Consultancy and project records | 7 years |
| Training and professional learning records | 5 years |
| Financial and invoicing records | 6 years |
| Anonymised systems insight or research materials | Retained where appropriate for ongoing systems learning |
Data is securely deleted, anonymised or archived when no longer required.
Your Rights
Under UK GDPR, you have the right to:
request access to your personal data
request correction of inaccurate information
request deletion of data where appropriate
object to certain forms of processing
restrict processing in some circumstances
request transfer of your information
withdraw consent where consent is the lawful basis
Requests may be made by contacting:
admin@ndpp.co.uk
Identity verification may be required before information is disclosed.
Complaints
If you have concerns about how NDPP handles personal data, please contact NDPP first so that concerns can be addressed appropriately.
You also have the right to contact the Information Commissioner’s Office (ICO):
Information Commissioner’s Office
Wycliffe House
Water Lane
Wilmslow
SK9 5AF
Telephone: 0303 123 1113
Website: www.ico.org.uk
Changes to This Policy
This policy may be updated periodically to reflect:
legal changes
operational developments
digital infrastructure changes
service evolution
The most current version will always be available on the NDPP website with the effective date clearly shown.