What we collect, why we collect it, and what you can do about it, in plain English.
Last updated: 24 October 2026
This website, neurodivergentminds.com, is run by Neurodivergent Minds, 47 Bengal Street, Ancoats, Manchester, M4 6BB, United Kingdom. We are the "data controller" for the personal information described here. You can contact us at info@neurodivergentminds.com.
When you buy something. Payment is taken by Stripe on its own secure page. Stripe passes us your email address, your name and billing details where you give them, what you bought, the amount, and a payment reference. We use this to confirm your order, deliver what you bought, keep accounting records and deal with any problems. Our legal basis is that we need it to carry out the contract with you, and that we have a legal duty to keep financial records.
Confirmation emails. After a purchase we email you your download links or access links. These are sent through a service called Resend. These are "transactional" emails about your order, not marketing.
The free guide and our email list. If you ask for the free Energy & Overwhelm Guide, or join our email list, we collect your email address (and your first name, if you choose to give it) through Kit, our email provider. The form tells you that by submitting it you are joining our email list. The guide opens straight away, and we also send you a one-off email with a link to it, through Resend. After that we send you practical tips and news about our guides and courses by email, including a short series of welcome emails over your first few weeks. Our legal basis is your consent, and you can withdraw it at any time using the unsubscribe link in any email.
CPD certificates. When you generate a certificate for a CPD course, we store the name you typed, your assessment score, the date, a certificate reference number and the payment it is linked to. We do this so a purchase produces one certificate, and so we can show it to you again. Our legal basis is our legitimate interest in preventing misuse of certificates, and the contract with you.
Coaching enquiries and clients. If you ask about coaching, we collect your name, email address, the times that suit you, whether you'd like to meet online or in person and anything you choose to tell us about what you'd like help with. We use this to reply and arrange sessions. If you go on to have coaching, we also keep brief notes of each session and payment records. Notes may include information about your health or neurodivergence where it's relevant to your coaching; we only record what's needed and keep it secure. For Access to Work coaching, we also keep your quote, invoices and the details needed to be paid through your grant. Our legal basis is taking steps at your request and the contract with you, and, for any health information, your explicit consent, which you can withdraw at any time. We never share coaching information with an employer, family member or anyone else unless you ask us to, or there is a serious risk of harm or a legal requirement.
Back on Track app. Back on Track is an app that parents and carers use with their children at home. A parent or carer sets up the family account, and is the person we have the agreement with. Children never have accounts and never sign in.
We keep:
Signing in with Google. If a grown-up chooses "Continue with Google", Google tells us their email address, that Google has checked it, and their first name (which we only use to suggest the name shown in the app). We never see their Google password, contacts or anything else in their Google account, and we never tell Google anything about the family or the children. Anyone who prefers not to use Google can sign in with an emailed code instead.
We use this only to run the app for the family: to show each child their day, keep the family's devices in step, send sign-in codes and important emails about the account (such as a reminder 3 days before a trial ends), and take payment. We do not use it for advertising, we do not build profiles of children, and there are no analytics or third-party trackers in the app.
Our legal basis is that we need this information to provide the service the parent or carer has asked for (our contract with them). Letters and notes that families write can include personal details, so we treat everything in the app as confidential: only the family's own signed-in devices can see it, and we look at it only if the family asks us to help with a problem.
Inside the app, children see a short note in plain words explaining that their grown-ups set it up, that their grown-ups can see their ticks and tokens, and that nobody else can. Nothing is ever sold or advertised in the children's screens.
Families can download all their data, delete one child's data, or delete the whole family, at any time from the Account page in the app's grown-up area.
When you contact us. If you email us, we keep your message and our reply so we can help you and keep a record.
Basic technical information. Like every website, our server records technical details of each visit, such as your IP address, the page requested and the time. We use this to keep the site secure and working, and keep it for a limited period.
We don't use advertising or tracking cookies. To make purchased content work, the website saves a few small items in your browser's local storage on your own device:
This stays on your device. You can clear it at any time through your browser settings, but if you do, you may need to use the link in your confirmation email to restore access.
The Back on Track app saves a copy of the family's data on each signed-in device so it works without a connection, and one sign-in cookie so the device stays signed in to the family. If you sign in with Google, two short-lived cookies are also used during sign-in to keep it secure. They last up to 15 minutes. It uses no other cookies, and loads nothing from other companies (its fonts are stored on our own server).
Some third-party services we use may set their own cookies or receive your IP address when you use them: Stripe on its checkout pages, Kit on the free guide form, Google Fonts, which supplies the typeface used in the Little Minds games, and Google, if you choose to sign in with Google or buy a plan through Google Play. Please see their own privacy notices for details.
We count visits to our website so we can see which pages and articles are useful. We do this on our own server, without cookies, and without Google Analytics or any other third-party tracker.
When a page loads, your browser tells our server which page you opened, which website you came from (if any) and any campaign tag in the link, such as utm_source. Our visit counter does not store your IP address or anything that could identify you. To estimate how many different people visit in a day, it briefly holds a one-way scrambled code made from your IP address and browser type in memory only. The code is thrown away at the end of the day and is never saved. What we keep is daily totals, for example how many times a page was viewed, and we keep them for up to 13 months. We count clicks on buy and download buttons in the same way, without knowing who clicked.
We do not count visits from browsers that have Do Not Track or Global Privacy Control switched on, and we do not count visits to the Little Minds game page. Our legal basis is our legitimate interest in understanding which pages help people. Like most web servers, ours also keeps standard technical logs for security and fault-finding.
Little Minds is designed for children, but purchases are made by parents, carers and educators. We don't ask children for their name, email address or any other personal information. A child's progress in the games is kept in the browser on the device they use and isn't sent to us.
Back on Track is used by children, so we follow the ICO's Children's Code (the Age Appropriate Design Code). The app is set to the most private settings by default and has nothing to change. We keep only a child's first name or nickname and what their family adds. There are no adverts, nudges, streaks, leaderboards or comparisons between children. Location is never collected, and nothing is shared outside the family. A child's information is controlled by their parent or carer, who can download or delete it at any time.
We only share information with the services that help us run the website, and only what they need:
We may also share information if the law requires it. Some of these providers are based outside the UK. Where information is transferred abroad, we rely on the safeguards those providers put in place to protect it.
Under UK data protection law you have the right to:
To use any of these rights, email info@neurodivergentminds.com. We'll respond within one month.
If you are unhappy with how we have handled your information, you can complain to the Information Commissioner's Office (ICO) at ico.org.uk or on 0303 123 1113. We'd always appreciate the chance to put things right first.
If we change this policy we'll update the date at the top. If a change is significant, we'll make it clear on the website.
