Privacy, in plain words

What we deliberately never ask for

The online assessment does not ask your child's name, their school's name, or anything that identifies them. There are no free-text boxes anywhere, so nothing can be over-shared by accident. This is a design decision, not an oversight: your child's story should be told to a person, in confidence, not typed into a form.

What we collect when you take the assessment

Your email address, your child's age band, your fifteen answers, and (if you arrived via a link from a school talk or a professional) a tag telling us where you heard about the practice. That is the complete list.

What we do with it

Your answers are used to prepare your child's written profile, which is generated with the help of a secure AI service working under Zoe's framework and rules, and sent to your email address. We may then send you occasional, genuinely useful letters from the practice; every one carries an unsubscribe link, and unsubscribing is honoured immediately and permanently.

How long we keep it

If you do not go on to work with the practice, your assessment data is deleted within twelve months. If you ask us to delete it sooner, we will, promptly and completely: write to privacy@zoeaspinall.com.

Where it lives

Data is stored with Supabase in London (United Kingdom region infrastructure), email is delivered by Postmark, and profiles are generated via Anthropic's API. Each processes data only on our instructions. We never sell, rent, or share your information with anyone else.

Your rights

Under UK data protection law you can ask to see the data we hold about you, correct it, or have it deleted. One email to privacy@zoeaspinall.com does any of those. If you are ever unhappy with how we have handled your data, you can complain to the ICO at ico.org.uk, though we would ask for the chance to put it right first.

Data controller: the practice of Zoe Aspinall. This page was last updated in July 2026.