Privacy Policy
1. Introduction
AuDHD UK (“we”, “us”, “our”) is committed to protecting your privacy and ensuring that your personal information is handled in a safe and responsible manner. This Privacy Policy explains how we collect, use, store, and protect your personal data when you visit our website or use our services.
Please read this policy carefully to understand our views and practices regarding your personal data and how we will treat it.
2. Information We Collect
We may collect and process the following personal information about you:
Identity Data: Name, date of birth, gender.
Contact Data: Email address, postal address, telephone numbers.
Technical Data: IP address, browser type and version, time zone setting, browser plug-in types and versions, operating system, platform, and other technology on the devices you use to access this website.
Usage Data: Information about how you use our website, products, and services.
Marketing and Communications Data: Your preferences in receiving marketing from us and your communication preferences.
Health and Safeguarding Data: Information you provide when accessing our support services or during safeguarding processes (processed with strict confidentiality and legal safeguards).
We collect this information directly from you when you provide it to us (for example, when you fill in forms, contact us, or register for events), and automatically through your use of our website.
3. How We Use Your Information
We use your personal data for the following purposes:
To provide and manage our services and support.
To communicate with you, including responding to enquiries and sending important updates.
To improve our website, services, and user experience.
To comply with legal and regulatory obligations, including safeguarding and crisis management.
To send you marketing communications where you have consented to receive them.
To protect the safety and wellbeing of our beneficiaries, staff, volunteers, and the public.
Where we process sensitive personal data (such as health or safeguarding information), we do so only where necessary and with appropriate safeguards.
4. Lawful Basis for Processing
We process your personal data based on one or more of the following lawful bases:
Consent: Where you have given clear consent for us to process your personal data for a specific purpose.
Contractual Necessity: Where processing is necessary to perform a contract with you.
Legal Obligation: Where we must comply with a legal obligation.
Vital Interests: To protect someone’s life.
Legitimate Interests: Where processing is necessary for our legitimate interests, and these do not override your rights.
5. Sharing Your Information
We may share your personal data with:
Our staff and volunteers who need the information to provide support or manage services.
Third-party service providers who assist us in operating our website and delivering services (under strict confidentiality agreements).
Emergency services, health professionals, or statutory safeguarding agencies if necessary to protect your safety or the safety of others.
Regulatory authorities or law enforcement if required by law.
We do not sell or rent your personal data to third parties.
6. Data Security
We take appropriate technical and organisational measures to protect your personal data against unauthorised or unlawful processing, accidental loss, destruction, or damage. This includes secure storage, access controls, and staff training.
7. Data Retention
We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected, including to meet legal, regulatory, tax, accounting, or reporting requirements.
Typically, safeguarding and incident records are retained for at least six years.
8. Your Rights
Under data protection law, you have the right to:
Access your personal data.
Request correction of inaccurate or incomplete data.
Request erasure of your personal data (subject to legal exceptions).
Object to or restrict processing of your data.
Request data portability.
Withdraw consent at any time (where processing is based on consent).
Lodge a complaint with the Information Commissioner’s Office (ICO).
To exercise these rights, please contact our Data Protection Lead (contact details below).
8.1 Data Subject Access Request (DSAR) Procedure
What Is a DSAR?
Under the UK GDPR, you have the right to request a copy of the personal data we hold about you, and to ask for it to be corrected, deleted, or restricted.
How to Make a Request
Email safeguarding@audhduk.org or write to:
AuDHD UK, 2nd Floor College House, 17 King Edwards Road, Ruislip, London, HA4 7AEPlease include:
Your name and contact details
Details of the information you are requesting
Proof of identity (we may ask for this to protect your data)
What Happens Next?
We will acknowledge your request within 5 working days.
We will respond within one month, or let you know if more time is needed (up to two additional months for complex requests).
If your request is unclear, we may ask for more information.
If your request is manifestly unfounded or excessive, we may refuse it or charge a reasonable fee.
Your Rights
You can request:
Access to your data
Correction of inaccurate data
Erasure of your data (unless we have a legal reason to keep it)
Restriction or objection to processing
Data portability (where applicable)
Complaints
If you are unhappy with our response, you can contact the Information Commissioner’s Office (ICO): www.ico.org.uk
9. Cookies and Tracking Technologies
Our website uses cookies and similar technologies to improve your experience. For detailed information, please see our Cookie Policy.
10. Changes to This Privacy Policy
We may update this Privacy Policy from time to time. We will notify you of any significant changes by posting the new policy on our website with an updated effective date.
11. Contact Us
If you have any questions about this Privacy Policy or how we handle your personal data, please contact:
Data Protection Lead / Designated Safeguarding Lead
Georgina Banks
Email: safeguarding@audhduk.org
Thank you for trusting AuDHD UK with your personal information.
Last updated: 30 April 2025