Privacy Policy
Last updated: February 20, 2025
The purpose of this policy is to outline Active Neuroinclusion’s commitment to protecting the privacy and personal data of all clients and people who’s personal data is collected through our website, services, or any other means. This policy ensures compliance with the General Data Protection Regulation (GDPR) and the UK Data Protection Act 2018 by detailing how personal data is collected, processed, stored, and protected.
Data collection
What data we collect
The following data may be collected when you supply us with information by, for example, filling out online forms, purchasing resources or entering into service contracts.
We may collect and process the following types of personal data:
Personal Identification Information: Name, date of birth, gender, job role, place of work and contact details.
Health and Special Categories Data: Neurodiversity-related or health information, processed only with explicit consent.
Participation Information: Records of use of our services.
Financial Information: Payment details for service transactions.
With regard to each of your visits to our website we may automatically collect information to power our site analytics, including the following:
Technical Data: IP addresses, browser types, and website activity.
Clicks, Internal links, Pages visited, Scrolling, Searches, Timestamps
We share this information with Squarespace, our website analytics provider, to learn about site traffic and activity.
Purpose of data collection
Personal data is processed by us for the following purposes:
Managing participation in our services and events.
To contact clients as necessary in accordance with the services they have requested.
Managing financial transactions.
Ensuring client/ participant safety and well-being.
Complying with safeguarding, health, and safety regulations.
Improving services through feedback.
Where you have supplied personal information via our website, we will share this data with Squarespace, our online store hosting provider, so that they can provide website services to us.
Information we automatically collect about you, via our website will be used:
to administer our site including troubleshooting and statistical purposes;
to improve our site to ensure that content is presented in the most effective manner for you and for your computer;
security and debugging as part of our efforts to keep our site safe and secure.
This information is collected anonymously and is not linked to information that identifies you as an individual. We use Google Analytics to track this information. Find out how Google uses your data at https://support.google.com/analytics/answer/6004245.
Legal basis for data processing
The GDPR states that we must have a lawful basis for processing your personal data. We process personal data based on:
Consent provided by the individual.
Contractual obligations.
Legal requirements.
Legitimate interests of the organisation, where these do not override the rights of the data subject.
Compliance and obligations
Active Neuroinclusion complies with our obligations under the General Data Protection Regulation (GDPR) by keeping personal data up to date; by storing (and destroying it) securely; by not collecting or retaining excessive amounts of data; by protecting personal data from loss, misuse, unauthorised access and disclosure and by ensuring that appropriate technical measures are in place to protect personal data.
Data retention:
We will retain personal data only as long as necessary for its intended purpose or as required by law (e.g., seven years for financial records).
We will regularly review and securely delete or anonymise outdated data.
Incident response:
We will investigate suspected data breaches promptly and notify affected individuals and the Information Commissioner’s Office (ICO) within 72 hours if required.
Data sharing:
We will not rent, sell or share personal information about you with other people or non-affiliated companies.
We will use all reasonable efforts to ensure that your personal data is not disclosed to regional/national institutions and authorities, unless required by law or other regulations.
Unfortunately, the transmission of information via the internet is not completely secure. Although we will do our best to protect your personal data, we cannot guarantee the security of your data transmitted to our site; any transmission is at your own risk. Once we have received your information, we will use strict procedures and security features to try to prevent unauthorised access.
Third party recipients of personal data
We sometimes share personal data with third parties, for example, where we have contracted a supplier to carry out specific tasks. In such cases we have carefully selected which partners we work with.
We may share your personal data with the parties set out below:
• service providers who provide IT, financial and system administration services;
• professional advisers including lawyers, bankers, accountants and insurers who provide consultancy, banking, legal, insurance and accounting services;
• HM Revenue & Customs, regulators and other authorities based in the United Kingdom and other relevant jurisdictions who require reporting of processing activities in certain circumstances.
We require all third parties to whom we transfer your information to respect the security of your personal information and to treat it in accordance with the law. We only allow third parties to process your personal information for specified purposes and in accordance with our instructions.
Third party links
Our site may contain links to and from third party websites, for example to book online training. If you follow a link to any of these websites, please note that these websites have their own privacy policies and that we do not accept any responsibility or liability for these policies. Please check these policies before you submit any personal data to these websites.
Cookies
This website uses cookies and similar technologies, which are small files or pieces of text that download to a device when a visitor accesses a website or app. For information about viewing the cookies dropped on your device, visit The cookies Squarespace uses.
These functional and required cookies are always used, which allow Squarespace, our hosting platform, to securely serve this website to you.
These analytics and performance cookies are used on this website, only when you acknowledge our cookie banner. This website uses analytics and performance cookies to view site traffic, activity, and other data.
Your rights and your personal data
Unless subject to an exemption under the GDPR, you have the following rights with respect to your personal data:
The right to request a copy of your personal data which Active Neuroinclusion holds about you;
The right to request your personal data is erased where it is no longer necessary for Active Neuroinclusion to retain such data;
The right to withdraw your consent to the processing at any time;
The right to request that we provide you with your personal data and where possible, to transmit that data directly to another data controller, (known as the right to data portability), (where applicable).
The right, where there is a dispute in relation to the accuracy or processing of your personal data, to request a restriction is placed on further processing;
The right to object to the processing of personal data, (where applicable)
The right to lodge a complaint with the Information Commissioners Office.
Complaints Notice
The client has the right to complain to the Independent Commissioner’s Office (ICO) if they think there is a problem with the way we are handling their data.
Changes to our privacy policy
Any changes we may make to our privacy policy in the future will be posted on this page. Please check back frequently to see any updates or changes to our privacy policy.
Contact
Questions, comments and requests regarding this privacy policy should be addressed to Emily Townsend:
info@activeneuroinclusion.com