The Pathway Partnership

Privacy Policy

Last updated: August 2026

The Pathway Partnership is committed to protecting the privacy, confidentiality and personal information of the children and young people, parents and carers, education professionals, schools and organisations we work with.

Because our work may involve children and young people and information relating to their wellbeing, neurodiversity, additional needs and personal circumstances, we recognise that some of the information entrusted to us can be particularly sensitive. We aim to collect only the information we genuinely need, use it only for appropriate purposes and protect it throughout our work.

This Privacy Policy explains how we collect, use, store and share personal information and the rights individuals have under UK data protection law.

1. Who We Are

The Pathway Partnership is the education-focused division of Made With ADHD, providing support to primary schools, secondary schools, Multi-Academy Trusts, children and young people, parents/carers and education professionals.

For data protection purposes, the organisation responsible for your personal information will depend on the circumstances in which the information is collected.

Where The Pathway Partnership collects information directly for its own purposes, it may act as a data controller.

Where we deliver services on behalf of a school, academy or Multi-Academy Trust, the school or Trust may be the data controller and The Pathway Partnership may act as a data processor, or in some circumstances the parties may each have separate controller responsibilities.

These arrangements will be established with commissioning organisations where appropriate.

Organisation: Made With ADHD / The Pathway Partnership
Contact: info@madewithadhd.com
Website: www.madewithadhd.com

2. The Information We May Collect

The information we collect depends upon how someone interacts with us.

Website visitors and enquiries

We may collect:

• Name
• Email address
• Telephone number
• Job title
• School or organisation
• Information provided through enquiry forms
• Communications with us
• Website usage and technical information
• Cookie information and analytics data, where applicable

Education professionals

We may collect:

• Name
• Professional contact information
• Role
• School or Trust
• Communications
• Meeting information
• Programme enquiries
• Feedback
• Training attendance

Parents and carers

We may collect:

• Name
• Contact details
• Relationship to the child
• Communications
• Information provided when accessing our services
• Relevant information concerning their child’s support

Children and young people

Depending upon the service being delivered, we may receive or collect information including:

• Name
• Age/year group
• School
• Relevant educational information
• Attendance or engagement information
• Referral information
• Pupil voice
• Programme assessments and reviews
• Mentoring notes
• Goals and progress information
• Information about emotions, confidence and wellbeing
• Relevant information concerning behaviour or school experiences
• Information relating to additional educational needs or neurodivergence
• Relevant information provided by the child, school or parent/carer

We will seek to collect only information that is necessary and proportionate for the service being provided.

3. Special Category Information

Some of our work may involve information that receives additional protection under UK data protection law.

This may include information relating to a person’s:

• Physical or mental health
• ADHD
• Autism
• Neurodevelopmental conditions
• Disability
• Relevant medical needs
• Racial or ethnic origin
• Religious or philosophical beliefs
• Other information classified as special category data

Health information is special category data under UK GDPR and requires additional safeguards. 

Where we process special category information, we will identify and document an appropriate lawful basis under Article 6 of UK GDPR and an appropriate condition under Article 9 and/or the Data Protection Act 2018 where required.

We will not collect sensitive information simply because it may be interesting or potentially useful. Data minimisation is particularly important when dealing with special category information. 

4. Why We Use Personal Information

We may use personal information to:

• Respond to enquiries
• Arrange meetings or consultations
• Deliver commissioned school services
• Manage referrals
• Deliver Evolve programmes
• Provide one-to-one mentoring
• Provide transition support
• Deliver Bridge interventions
• Deliver parent/carer or staff sessions
• Understand an individual’s support needs
• Monitor pupil progress
• Review the effectiveness of interventions
• Communicate appropriately with schools and families
• Produce reports for commissioning organisations
• Maintain appropriate safeguarding records
• Manage bookings and payments
• Maintain business and accounting records
• Improve our programmes and services
• Meet legal, regulatory, insurance or safeguarding responsibilities

We will not use children’s personal information for unrelated commercial marketing.

5. Our Lawful Basis for Processing

UK GDPR requires organisations to have an appropriate lawful basis before processing personal information.

Depending upon the circumstances, our lawful basis may include:

Contract – where processing is necessary to provide an agreed service.

Legitimate interests – where there is a legitimate and proportionate reason to process information and those interests do not override the individual’s rights.

Legal obligation – where processing is necessary to meet a legal requirement.

Consent – where appropriate and where valid consent has been freely given.

Vital interests – in exceptional circumstances where processing is necessary to protect someone’s life.

Where a school or Trust commissions our services, the lawful basis applying to pupil information will depend upon the respective roles and responsibilities of The Pathway Partnership and the commissioning organisation.

We will establish this as part of our data protection arrangements rather than assuming that parental consent is always the appropriate lawful basis.

6. Children’s Information

Protecting children’s privacy is particularly important to us.

The ICO states that organisations processing children’s information should consider the child’s best interests and provide privacy information in clear, age-appropriate language. Children also have data protection rights in their own right. 

When working directly with children and young people we will aim to:

• Explain appropriately what information we collect and why
• Use language appropriate to the child’s age and understanding
• Collect only information relevant to their support
• Treat information respectfully and confidentially
• Store information securely
• Consider the child’s best interests
• Respect the child’s data protection rights where applicable
• Follow safeguarding requirements where information indicates that a child may be at risk

We may therefore provide a separate child-friendly privacy notice alongside this full Privacy Policy.

7. Confidentiality and Safeguarding

Young people accessing mentoring or intervention need to feel able to speak openly.

However, confidentiality has limits.

If information shared with us indicates that a child or another person may be at risk of harm, or raises a safeguarding concern, information may need to be shared with the school’s Designated Safeguarding Lead, appropriate safeguarding professionals, emergency services or another relevant authority.

Only information that is relevant and appropriate will be shared.

Data protection law does not prevent appropriate information sharing where this is necessary to safeguard children. The ICO provides specific guidance for information sharing in child safeguarding and education settings. 

Children and young people will be helped to understand these confidentiality boundaries at an appropriate level.

8. Information Received From Schools

Schools may provide information about pupils to enable us to deliver an intervention.

This could include:

• Referral information
• Relevant SEND information
• Behaviour or pastoral information
• Attendance information
• Relevant safeguarding information
• Previous interventions
• School observations
• Contact information
• Information required to deliver the agreed support

Schools remain responsible for ensuring that information they disclose to us is shared lawfully.

Where required, appropriate contractual and data-processing arrangements will be established between The Pathway Partnership and the school or Trust.

9. Sharing Personal Information

We do not sell personal information.

We may share information where necessary with:

• The school or Trust commissioning the service
• Relevant school staff
• Parents/carers where appropriate
• Safeguarding professionals
• Local authorities
• Emergency services
• Professional advisers
• Insurers
• Accountants
• IT, website, email or secure-storage providers acting on our behalf
• Other service providers necessary for operating the organisation

We will only share personal information where there is an appropriate reason and lawful basis for doing so.

10. Photographs, Video and Testimonials

We will not automatically use photographs, video footage, pupil stories, case studies or testimonials for marketing simply because an individual has participated in a programme.

Where identifiable photographs, recordings, testimonials or case studies are proposed for promotional use, appropriate permission and data protection considerations will be addressed separately.

Particular care will be taken where children and young people are involved.

Where possible, impact information may be anonymised so that individual pupils cannot be identified.

11. Website Cookies and Analytics

Our website may use cookies or similar technologies to:

• Operate the website
• Remember preferences
• Understand how visitors use the website
• Measure website performance
• Improve the visitor experience

Where legally required, non-essential cookies will not be activated without appropriate consent.

Further information should be provided in our separate Cookie Policy.

12. Marketing

We may send information about our services to schools, professionals or individuals where we have an appropriate lawful basis to do so.

Individuals can opt out of marketing communications at any time.

We will not use pupil information obtained through school interventions to directly market services to children.

13. How We Protect Information

We take reasonable organisational and technical measures to protect personal information against:

• Unauthorised access
• Loss
• Misuse
• Disclosure
• Alteration
• Accidental destruction

Measures may include secure systems, access controls, password protection, device security, appropriate staff/facilitator access restrictions and secure deletion processes.

People working on behalf of The Pathway Partnership who have access to personal information will be expected to maintain confidentiality and follow appropriate data protection and safeguarding procedures.

14. How Long We Keep Information

We will retain personal information only for as long as it is necessary for the purpose for which it was collected and to meet relevant legal, contractual, safeguarding, insurance or regulatory requirements.

Different categories of information may require different retention periods.

Our detailed retention periods will be recorded within our internal Data Retention Schedule.

When information is no longer required, it will be securely deleted, destroyed or anonymised as appropriate.

15. International Data Transfers

Some technology providers used by our website or business systems may process information outside the United Kingdom.

Where personal information is transferred internationally, we will take reasonable steps to ensure an appropriate lawful transfer mechanism and safeguards are in place as required by UK data protection law.

16. Automated Decision-Making

The Pathway Partnership does not intend to make decisions about whether a child receives support solely through automated decision-making.

Referral levels, assessments and recommendations should involve human professional judgement and discussion with the school, rather than an algorithm making significant decisions about a young person.

17. Your Data Protection Rights

Depending upon the circumstances, individuals may have rights including:

• The right to be informed
• The right of access
• The right to rectification
• The right to erasure
• The right to restrict processing
• The right to object
• The right to data portability where applicable
• Rights relating to automated decision-making

These rights are subject to circumstances and exemptions under data protection law.

Children have data protection rights as well as adults, and where a child has sufficient understanding they may be able to exercise those rights themselves. 

Requests can be made using:

info@thepathwaypartnership.com

18. Complaints

If you have concerns about how The Pathway Partnership has handled personal information, please contact us first so that we can investigate.

Email: info@thepathwaypartnership.com

You also have the right to raise concerns with the UK’s independent data protection regulator, the Information Commissioner’s Office (ICO).

Information Commissioner's Office⁠

19. Changes to This Privacy Policy

We may update this Privacy Policy as our services develop or where legal or regulatory requirements change.

The latest version will always be available through our website and the date of the most recent update will be displayed at the top of this page.