Privacy Notice

Last updated: 10 November 2026

Who we are

L-Fit Pathways is an alternative provision for young people aged 5–25, based at 15–17 Irlam Road, Bootle, Liverpool, L20 4AE. We are the data controller for the personal information described in this notice and are registered with the Information Commissioner’s Office (registration reference ZC250834).

For any data protection question, contact Adam Byrne at adam.byrne@lfitpathways.com or on 07944 308462.

What information we collect

When you make a referral or enquiry, or when a young person joins our provision, we may collect:

• Contact details for parents, carers, referring professionals and, where appropriate, young people
• The young person’s name, age, date of birth, school or college, year group and local authority
• Unique Pupil Number (UPN) and ethnicity, where a school or local authority chooses to provide them
• EHCP status, SEND, health, medical, wellbeing and dietary information
• Safeguarding information, including risk factors, current concerns and details of involved agencies such as social care or CAMHS
• Attendance, exclusion history and progress records
• Supporting documents you choose to upload, such as EHCPs, school reports or risk assessments
• Commissioning and invoicing contacts, such as finance contacts and purchase order numbers
• Reviews or feedback you choose to send us, and your email address if you subscribe to our newsletter

Much of this is special category data (for example health, SEND and ethnicity). We only ask for what we need to decide whether we can support a young person safely, to plan their provision, and to meet our safeguarding and commissioning duties. Optional fields are marked optional.

Why we use it and our lawful basis

• To assess and respond to a referral and plan provision. Consent for direct parent or carer referrals; legal obligation or public task for local authority and EHCP-funded referrals.
• To keep young people safe. Vital interests and our safeguarding duties, including sharing information where a child may be at risk of harm.
• Special category data is processed under UK GDPR Article 9, principally for safeguarding and social protection purposes, and with explicit consent where applicable.
• To manage placements, reporting and invoicing with commissioning schools, colleges and local authorities.
• Newsletter. Consent, which you can withdraw at any time using the link in any email or by contacting us.
• Reviews. Consent. Reviews are moderated before anything is published.
• Photography and media. Only with specific written consent from a parent or carer, which can be withdrawn at any time.

Who we share it with

We share personal information only where necessary and lawful, including with the referring school, college or local authority, and, where safeguarding requires it, with children’s social care, the police or other statutory agencies. We never sell personal information and never share it for marketing without explicit consent.

We use trusted service providers to run our website and systems, who process information on our behalf: Cloudflare (website hosting and form handling), Brevo (email delivery and newsletter), and Google Analytics (website usage statistics). Referral and safeguarding records are held on secure, access-controlled systems and access is limited to the Co-Directors and staff directly involved in a young person’s provision.

How long we keep it

Referral and provision records are kept for the duration of provision plus 7 years, or longer where the commissioning local authority requires it. Safeguarding records are kept in line with statutory safeguarding record-retention guidance. Newsletter details are kept until you unsubscribe. If we are unable to offer a placement, we will not keep the referral longer than is necessary to respond and record the decision.

Your rights

You, or a young person where age-appropriate, can ask to see the information we hold, have it corrected, or ask for it to be deleted, restricted or moved, and can object to or withdraw consent for processing. Some requests may be limited where we must keep information for safeguarding or legal reasons. We will respond within one calendar month.

If you are unhappy with how we have handled your information, please tell us first so we can put it right. You can also complain to the Information Commissioner’s Office at ico.org.uk/make-a-complaint or on 0303 123 1113.

Cookies and website analytics

We use Google Analytics to understand how the website is used, such as which pages are visited. This uses cookies and similar technologies. You can block or delete cookies in your browser settings.

Changes to this notice

We review this notice at least annually and whenever our processing changes. The latest version is always on this page. See also our Data Protection Policy, available on request.