Privacy Notice
Ask RESPOND Pro — Sandbox Demo Environment
Version 1.0  |  March 2026
This notice explains how RESPOND Safeguarding and TASIS England handle information in connection with the Ask RESPOND Pro sandbox. Please read it before using the tool.

1. Who We Are

The Ask RESPOND Pro sandbox is operated jointly by:

OrganisationRole
RESPOND Safeguarding Developer and owner of the Ask RESPOND Pro tool and the RESPOND Safeguarding Framework. Responsible for the AI model, system configuration, and access code allocation.

Contact: darren@respondsafeguarding.org
Website: respondsafeguarding.org
TASIS England Host school and co-developer. TASIS England contributed to the development of the RESPOND Framework and is the originating setting for the tool. Responsible for access code distribution to named evaluators.

Address: TASIS England, Coldharbour Lane, Thorpe, Surrey, TW20 8TE
Contact: dsinghmacpherson@tasisengland.org

RESPOND Safeguarding and TASIS England act as joint data controllers for the purposes of this sandbox under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

2. What This Sandbox Does and Does Not Collect

This sandbox does not log, store, or transmit any conversation content. Nothing you type into the chat is retained after your session ends. There is no server-side logging of queries or responses.

What happens when you use the tool

What the access code system records

Access codes are verified server-side at login. The verification process checks whether the code you enter matches a configured value. No record of which code was used, when, or by whom is written to any log or database. The codes exist solely to control access to the sandbox.

What we do not collect

3. The AI Model Provider

Ask RESPOND Pro uses the Claude API provided by Anthropic, PBC. When you send a message, it is transmitted to Anthropic's servers to generate a response. Anthropic is a sub-processor in this context.

Anthropic's privacy policy is available at anthropic.com/privacy. We have configured our API usage under standard commercial API terms, which do not permit Anthropic to use inputs to train their models without separate consent.

Important: This is a demonstration environment. You must not enter real names, identifiable pupil information, staff details, or live case data into this tool. Any information you choose to enter is processed by Anthropic in accordance with their privacy policy. Enter only anonymised or fictional scenarios.

4. Legal Basis for Processing

To the extent any personal data is processed in connection with this sandbox (for example, if you contact us directly with feedback), the legal basis is legitimate interests (UK GDPR Article 6(1)(f)) — specifically, our legitimate interest in evaluating and improving safeguarding technology for use in educational settings.

Because this sandbox does not collect or process personal data through normal use, UK GDPR obligations are engaged only in the limited circumstances described above.

5. Data Retention

Data TypeRetention
Conversation contentNot retained. Deleted when your browser tab closes.
Access code verificationNot logged. No record is created.
Accessibility preferencesStored in your own browser's localStorage only. Cleared when you clear browser data.
Direct contact emailsRetained only as long as necessary to respond to your query. Not shared with third parties.

6. Your Rights

Under UK GDPR, you have the following rights in relation to any personal data we hold about you:

Given the minimal data processed by this sandbox, the practical exercise of most of these rights will not apply. To exercise any right, or to raise a concern, contact us at darren@respondsafeguarding.org.

You may also contact the ICO: ico.org.uk  |  0303 123 1113

7. Security

The sandbox is hosted on Netlify's infrastructure, which provides HTTPS encryption in transit for all data. Access is controlled by individual access codes distributed to named evaluators only. No conversation data is written to disk or transmitted beyond the Anthropic API call.

Despite these measures, no system is entirely without risk. You remain responsible for the information you choose to enter and should not input real case information under any circumstances.

8. Changes to This Notice

We may update this privacy notice from time to time. The version number and date at the top of this page indicate when it was last revised. Continued use of the sandbox following an update constitutes acceptance of the revised notice.

9. Contact

For any questions about this privacy notice or your data: