Summary
- We collect what you choose to send us, such as a contact form message, plus the basic technical data any website needs to work.
- We do not sell your data or use it for advertising.
- Our tools run in your browser. What you enter in them stays on your device.
- You can ask to see, correct or delete your data.
Who we are
NeurodiversAtSea is a registered charity in England and Wales (number 1208735). We are the data controller for personal information collected through this website.
You can contact us about privacy at hello@neurodiversatsea.org, or by post at Apartment 3.09, 1 College Lane, Liverpool, L1 3BN.
What we collect and why
- Contact form messages. Your name, email address, topic and message, so we can reply. Our lawful basis is legitimate interests: responding to people who contact us.
- Peer-support requests. Your name, WhatsApp number, country or time zone, connection to maritime work and your reasons for joining, so that a moderator can review your request and, if suitable, invite you to a group. Your email address is optional. Our lawful basis is your consent, which you give when you send the form.
- Information about your health or neurodivergence. This is "special category" data, which the law protects more strongly. You may include it in a contact message, and asking to join our peer-support community may itself suggest that you are neurodivergent. We only use it to deal with your message or request, and only with your explicit consent, which you give by ticking the consent box on the form.
- News editor accounts. If you write or review news for us, your email address and a record of the changes you make, so we can manage who can edit the site.
- Technical data. Our hosting provider processes IP addresses, browser details and request logs to deliver the site and protect it from attack and spam. Our lawful basis is legitimate interests: keeping the site working and secure.
We do not ask for more than we need. Please do not send us medical records unless we ask for them. We do not make decisions about you by automated means alone.
Tools and settings on your device
Our tools, such as the adjustment builder and spiky profile, work entirely in your browser. What you type is not sent to us. Your accessibility settings are saved in your browser's local storage so they apply on every page. You can clear them at any time with the "Reset to default" button or by clearing your browser data. See our cookies page for details.
Who we share it with
We use a small number of service providers, who process data only on our instructions and under contracts that protect it:
- Cloudflare, which hosts this website, runs our forms, blocks spam with Cloudflare Turnstile and controls sign-in to our news editor.
- Resend, which delivers form messages to our inbox by email.
- Zoho, our email provider, which stores the messages you send us.
- GitHub, which stores the content of this website, including news posts and a record of who edited them.
If you join the peer-support community, WhatsApp (Meta) is not our service provider: it is a separate organisation responsible for its own app. Other members may see your profile name, photo or number, depending on your WhatsApp settings, and Meta's own privacy policy applies to what you share in the group.
We will never sell your information. We only share it with anyone else if the law requires us to, or if we believe someone is at serious risk of harm. See our safeguarding policy.
Transfers outside the UK
Some of our service providers are based in, or use servers in, the United States and other countries. Where your data is transferred outside the UK, we make sure it is protected by an approved safeguard, such as the UK–US data bridge or the UK International Data Transfer Agreement or Addendum. Contact us if you would like more information.
How long we keep it
- Contact form messages: up to two years after our last contact with you.
- Peer-support requests: if your request is declined or you don't join, we delete it within three months. If you join, we keep it while you are a member and for up to one year after you leave.
- News editor records: while you have editor access, and the record of published changes for as long as the content is on our site.
- Technical logs: for the short periods set by our hosting provider.
We may keep information for longer if we need it for a legal claim or a safeguarding concern.
Your rights
Under UK data protection law you have the right to:
- ask for a copy of the information we hold about you
- ask us to correct it, or to delete it
- object to or restrict how we use it
- ask for a copy in a format you can take elsewhere, where the law allows
- withdraw your consent at any time, where we rely on consent. This doesn't affect anything we did before you withdrew it
Some rights only apply in certain circumstances. To use any of them, email hello@neurodiversatsea.org. We will reply within one month.
Complaints
If you are unhappy with how we have handled your data, please tell us first at hello@neurodiversatsea.org so we can try to put it right. You also have the right to complain to the Information Commissioner's Office (ICO), the UK's data protection regulator.
Children
This website is meant for adults. Our peer-support community is only open to people aged 18 or over, and we don't knowingly collect information from children through our forms.
Changes to this policy
We review this policy at least once a year. If we make important changes, we will update this page and the date and version at the top.