Privacy Notice
Last updated: 4 August 2026
Who we are
The Neurodiversity Service is a UK neurodiversity assessment and support service. Our clinicians are registered with the Health and Care Professions Council (HCPC). We are registered with the Information Commissioner’s Office and are Cyber Essentials Plus certified. For data protection purposes, we are the data controller.
What data we collect
When you sign up for our launch notification, we collect:
- Your email address
- The date and time you gave consent
- The consent text you agreed to
When you use our booking or contact forms, we may also collect your name, phone number, and information relevant to your enquiry.
Additional information for clients
Where you proceed to booking or clinical services, we will collect additional personal and health information as part of assessment and support. This may include sensitive (special category) data relating to health, development, and safeguarding.
Further detail on how this information is used, stored, and your rights will be provided as part of our Assessment Consent Pack and clinical privacy information.
Why we collect it
We use your email address solely to:
- Send you a one-time notification when our service launches
- Respond to enquiries you have made directly to us
Our legal basis for processing is your consent under UK GDPR (Article 6(1)(a)). You can withdraw consent at any time.
How we store it
Your data is stored securely in a database hosted by Supabase, which uses encryption at rest and in transit. Access is restricted to authorised staff only. We do not routinely store personal data outside our secure systems.
Who we share it with
We do not share your personal data with any third parties for marketing purposes. Data is only shared with trusted service providers who support the operation of our systems (such as hosting and database providers), under appropriate data processing agreements.
How long we keep it
Launch notification emails: we will delete your email within 30 days of sending the launch notification, unless you have separately opted in to further communications.
Booking and enquiry data: retained for as long as necessary to provide our service and meet regulatory requirements.
Your rights
Under UK GDPR, you have the right to:
- access the personal data we hold about you
- request correction of inaccurate data
- request deletion of your data
- request restriction of processing
- request transfer of your data where applicable
- withdraw your consent at any time
- lodge a complaint with the Information Commissioner’s Office (ico.org.uk)
Contact us
To exercise any of your rights or ask a question about how we handle your data, email us at [email protected]