Privacy notice · updated 1 October 2026

Privacy notice

Plenda is built so that nothing about a child is kept.

The short version

• Plenda does not store anything you send it. It works out the answer and then forgets it.
• It does not log what you send. It only logs which tool was used, how long it took and whether it worked.
• There are no accounts, no cookies, no analytics and no advertising.

Who we are

Plenda is run by Eshmere Ltd (company number 17239365). Eshmere Ltd is the data controller for this service. Contact: hello@plenda.co.uk.

What happens to what you send

When you use a tool on this site, or an assistant uses Plenda for you, the dates or text are sent to Plenda. Plenda uses them to work out the answer, sends the answer back, and keeps nothing. Nothing is written to a database or a file.

On this site, dates and text are sent in the body of the request, never in the web address. Calendar files are made on your own device.

Names and other details

Please take out your child's name and other details before you paste anything. Use words like [CHILD] and [SCHOOL] instead.

As a safety net, Plenda looks for common details in anything you send:

• NHS numbers (checked with the NHS check digit)
• Unique Pupil Numbers
• National Insurance numbers
• dates of birth written next to words like "date of birth" or "DOB"
• email addresses, phone numbers and postcodes
• names written after a label such as "Name:" or "Pupil:"

If it finds one, it replaces it in its answer with a note such as [NHS number removed], and asks the assistant not to send it again. This check is not perfect. It will not find every name, so please remove them yourself.

What our host keeps

Plenda runs on Vercel, in London. Like any website, Vercel processes your IP address and basic details of each request, such as the web address, the time and your browser type, to run and protect the service. These request logs do not include what you typed or pasted. They are kept for a short time under Vercel's settings and are not used to identify anyone.

Our own logs record only the name of the tool used, how long it took and whether it worked.

Using Plenda in an assistant

If you use Plenda through ChatGPT, Claude, Copilot or another assistant, the assistant's own privacy policy and your settings with it cover your conversation. Plenda only receives what the assistant sends to it for your question. It never sees the rest of your conversation, and it keeps nothing.

The assistant may keep your conversation, and what it keeps depends on its settings. Most assistants give you some choices. The names and places differ, so look in the assistant's settings and help pages for:

• a temporary or private chat, which is not saved to your chat history
• memory controls, so the assistant does not remember details about your child in later chats
• a setting to keep your chats out of the training of its models
• a way to delete a chat, or all your chats, when you no longer need them
• shared links: a link to a chat can let anyone who has it read the whole chat, so take care before you share one, and delete links you no longer need

These choices are not the same in every assistant, or on every plan, and they can change. Check them before you paste a letter or a plan. Whatever the settings, take out names and other details first, and use [CHILD], [SCHOOL] and so on instead.

For local authority, school and college staff

Emails to us

If you email support, we keep your email to answer it, and delete it within 12 months. Please do not send a child's name or documents.

Why we use personal data, and the legal basis

You do not have to give us any personal details to use Plenda. Where personal data does reach us, this is what we use it for, and the legal basis for each use under the UK GDPR.

• Working out your answer. We use what you send only to work out the answer, then keep nothing. The legal basis is legitimate interests: ours, and those of the people who ask, in giving and getting free information about EHC needs assessments and EHC plans (Article 6(1)(f)). A letter or a plan can include health information about a child even after names are taken out. For that, the condition is that the use is needed to establish, exercise or defend legal claims, such as a request, a review or an appeal about an EHC plan (Article 9(2)(f)).
• Running and protecting the service. Request logs are used to keep Plenda working and to stop misuse. The legal basis is our legitimate interests in running a secure service (Article 6(1)(f)).
• Answering emails. The legal basis is our legitimate interests in answering the people who contact us (Article 6(1)(f)).

No one else receives this data apart from our host, Vercel Inc., and our email provider, which process it for us. Plenda makes no decisions about anyone by automated means.

Where the data is held

Plenda's servers are in London. Vercel Inc. is based in the United States, and our email provider may also hold data outside the UK, so request logs and emails may be kept or read outside the UK. Where that happens, the transfer is covered by the safeguards in our contracts with them: the UK International Data Transfer Addendum to the EU standard contractual clauses. Email us for a copy.

Your rights

Because Plenda keeps nothing, we will usually have no personal data about you. You still have rights under UK data protection law: to ask for a copy of what we hold, and to ask us to correct it, delete it, limit how we use it, or give it to you in a form you can pass on. You can also object to any use based on legitimate interests. Email us and we will reply within one month.

You can complain to us first, at the same email address. If you are unhappy with how we handle data, you can complain to the Information Commissioner's Office at ico.org.uk or on 0303 123 1113.

Changes

If this notice changes, we will update it here and change the date at the top.