Privacy Policy

1. Who We Are

ADHD Navigator ("we", "us", "our") operates an online platform that provides information about ADHD and introduces users to third-party assessment providers ("Clinics").

We are the data controller for the personal data you provide via this website, except where explicitly stated otherwise.

2. What Data We Collect

We may collect and process the following categories of personal data:

2.1 Information you provide directly

• Name
• Email address
• Phone number
• Location (e.g. postcode)
• Any information you include in forms or messages

2.2 Health-related information (special category data)

Where you choose to provide it, we may collect:

• symptoms or concerns relating to ADHD
• responses to questionnaires or screening tools

This is special category data under UK GDPR.

2.3 Automatically collected data

• IP address
• device and browser information
• usage data (pages visited, clicks, session duration)
• cookies and similar technologies (see Section 9)

3. How We Use Your Data

We use your personal data to:

• provide and operate the platform;
• respond to enquiries;
• match or refer you to relevant Clinics;
• improve our services and user experience;
• comply with legal obligations.

4. Lawful Bases for Processing

We rely on the following lawful bases under UK GDPR:

4.1 Personal data

• Consent – where you actively submit your information
• Legitimate interests – to operate and improve our platform
• Legal obligation – where required by law

4.2 Special category (health) data

We process health data only where:

• you have given explicit consent; and
• it is necessary to facilitate referrals to Clinics or provide requested services.

You may withdraw your consent at any time (see Section 10).

5. Sharing Your Data

5.1 Clinics

Where you request or consent to a referral, we may share your data with selected Clinics. These Clinics are independent data controllers and will process your data in accordance with their own privacy policies.

5.2 Service providers

We may share data with trusted third parties who provide services such as:

• hosting and infrastructure
• analytics
• customer support tools

These providers act as data processors and are bound by contractual obligations.

5.3 Legal requirements

We may disclose your data where required to:

• comply with legal obligations;
• enforce our Terms;
• protect rights, safety, or property.

6. International Transfers

If we transfer personal data outside the UK, we ensure appropriate safeguards are in place, such as:

• UK adequacy regulations; or
• Standard Contractual Clauses (SCCs).

7. Data Retention

We retain personal data only for as long as necessary to:

• fulfil the purposes described in this policy;
• comply with legal and regulatory obligations.

Typical retention periods:

• Enquiry data: 12–24 months
• Referral data: up to 3 years

8. Data Security

We implement appropriate technical and organisational measures to protect your data, including:

• encryption where appropriate;
• access controls;
• secure hosting environments.

However, no system is completely secure, and we cannot guarantee absolute security.

9. Cookies and Tracking

We use cookies and similar technologies to:

• operate the website;
• analyse usage;
• improve performance;
• support marketing activities (where applicable).

Where required, we will obtain your consent before placing non-essential cookies.

10. Your Rights

Under UK GDPR, you have the right to:

• access your personal data;
• request correction of inaccurate data;
• request erasure ("right to be forgotten");
• restrict processing;
• object to processing;
• data portability;
• withdraw consent at any time (for consent-based processing).

To exercise your rights, please contact us.

You also have the right to lodge a complaint with the Information Commissioner's Office (ICO).

11. Children's Data

This platform is not intended for children under 18. We do not knowingly collect personal data from children.

12. Third-Party Links

Our website may contain links to third-party websites, including Clinics. We are not responsible for their privacy practices.

13. Changes to This Policy

We may update this Privacy Policy from time to time. The latest version will always be available on our website.

14. Contact

If you have any questions about this Privacy Policy or how we handle your data, please contact us.

You have the right to lodge a complaint with the Information Commissioner's Office at any time.