About these terms
This page sets out who Fishing 4 Flowers is, what the Fishing 4 Flowers SEND platform does, and the basis on which it is supplied to schools.
It is written for the person evaluating or approving the application in a school’s own systems. It is short by design and links to the documents that carry the detail.
1. Who we are
| Item | Detail |
|---|---|
| Organisation | Fishing 4 Flowers Limited |
| Registered office | The Mill House, Salisbury Road, Steeple Langford, Salisbury, SP3 4NQ |
| Company number | 17024439 |
| ICO registration | ZC147128 |
| Data Protection Officer | Patrick Shone — pat@fishing4flowers.com |
2. What the platform does
Schools, academy trusts and local authorities use the Fishing 4 Flowers SEND platform to identify, plan, deliver and review special educational needs provision. It holds SEN profiles, Individual Support Plans, targets, interventions, reviews, exam access arrangements and related records.
Most of that data is special category data under Article 9 UK GDPR and most of it concerns children. The school, trust or local authority is the controller. Fishing 4 Flowers is the processor and acts only on the controller’s documented instructions.
Evidence document files are held exclusively in the school’s own SharePoint Online site or Google Shared Drive. A connected document store is a prerequisite for using the platform; there is no option to store a document in the platform’s own infrastructure, and the file itself is never copied into it.
3. What this page governs, and what it does not
This page is not the contract for the platform. The platform is supplied under a written agreement between Fishing 4 Flowers and the school, trust or local authority, entered into before the service commences. That agreement includes data processing terms made under Article 28 UK GDPR. Nothing on this page varies, replaces or adds to it.
Where anything on this page differs from the written agreement, the written agreement governs. Where anything on this page differs from the data processing agreement in respect of personal data, the data processing agreement governs.
These terms apply to the trust centre itself — this site and the documents published on it.
A school considering the platform may request the agreement and the accompanying governance pack from pat@fishing4flowers.com.
4. Data protection
Fishing 4 Flowers processes personal data in two distinct roles. The Privacy Notice sets both out in full and explains which organisation is responsible for what.
| Item | Position |
|---|---|
| Hosting | Laravel Cloud (on AWS), UK — eu-west-2 (London) |
| AI model | Anthropic Claude Sonnet 4.6 |
| AI inference | Amazon Bedrock, UK — eu-west-2 |
| AI model retention | No model retention |
| Training on school data | Not used to train models |
| Sign-in | Single sign-on only in production, via the school’s own identity provider |
| Authentication credentials held | None |
The Sub-processor Register lists the sub-processors engaged to deliver the platform, with the role of each, the data it processes and the country in which it holds that data. Controllers are given 30 days’ written notice before a new sub-processor is engaged and may object within that period under the data processing agreement.
The commitments governing artificial intelligence — that school data is not used to train models, that inference takes place in the United Kingdom, and that generated plans are drafts for professional review — are contractual terms of the data processing agreement rather than statements on this page.
5. What the application asks for in a school’s own systems
Staff sign in through the school’s own identity provider (Microsoft Entra ID or Google Workspace). The authentication event takes place in the school’s tenant, under the school’s own agreement with that provider. Fishing 4 Flowers holds no passwords, multi-factor secrets or passkeys for platform users.
Permission to reach documents is separate from sign-in. It is granted by an administrator, for locations the school nominates, and is revocable by the school without affecting staff sign-in.
Section 4 of the Sub-processor Register records the permission model in full, including which parts of it are in place today and which are scheduled. A school administrator assessing a consent request should read that section rather than rely on this summary.
6. What is asked of the school
| Item | Detail |
|---|---|
| Accuracy | The school determines what data is collected and is responsible for its accuracy and for the lawful basis on which it is processed. |
| Access | The school manages who among its staff holds an account, and removes access when a member of staff leaves or changes role. |
| Human review | Plans generated by the platform are drafts. A member of the school’s staff reviews, amends and approves a plan before it is used to make or support a decision about a child. |
| Documents | SEND evidence is placed in the school’s connected document store. Pupil data and pupil documents are not sent to Fishing 4 Flowers by email. |
Documents emailed to Fishing 4 Flowers are deleted and the school is asked to place them in its document store instead. This is not a formality: email would put special category data about a child into systems outside the arrangements described in the governance pack.
7. Acceptable use
The platform is provided for the purpose of managing special educational needs provision. It may not be used to:
- process personal data for any purpose the controller has not instructed
- attempt to access the data of another school, or any account other than one’s own
- probe, scan or test the security of the platform without written permission
- disrupt the service, or place load on it beyond ordinary use
- copy, resell or make the platform available to a third party outside the terms of the written agreement
Suspected misuse should be reported to pat@fishing4flowers.com.
8. Security research
Reports of suspected vulnerabilities are welcomed and should be sent to pat@fishing4flowers.com. Reports are acknowledged and investigated. Testing against the platform without prior written permission is not authorised, and no testing of any kind may be carried out against a school’s live data.
9. This site and its documents
The documents published here are the current versions and each carries its own version number and date. Each is published at a stable address and at a versioned one; the versioned address does not change once issued and is the one to cite in a school’s own records.
The documents describe the platform as it is at the date each was issued. Where a document records a measure as scheduled rather than in place, that distinction is deliberate and is stated so that a school knows what it is relying on.
The content of this site belongs to Fishing 4 Flowers. A school, trust or local authority may reproduce and circulate these documents for the purpose of its own procurement, due diligence, data protection impact assessment and record keeping.
10. Changes to these terms
This page is reviewed at least annually, and whenever the basis on which the platform is supplied changes. The version and date are shown at the head of the page, and material changes are recorded below.
11. Contact
Questions about these terms, about data protection, or about the governance pack should be addressed to Patrick Shone at pat@fishing4flowers.com.
Anyone dissatisfied with how Fishing 4 Flowers has handled their personal data may complain to the Information Commissioner’s Office at ico.org.uk, or by telephone on 0303 123 1113.
12. Version history
| Version | Date | Change |
|---|---|---|
| 1.1.0 | August 2026 | The model performing plan generation is named. |
| 1.0.0 | August 2026 | First issue. |
Fishing 4 Flowers Limited · Company number 17024439 · ICO registration ZC147128 Data Protection Officer: Patrick Shone — pat@fishing4flowers.com