What this policy covers
This privacy policy explains how Neuro-D. collects, uses, stores, and protects your personal data when you visit our website, submit an enquiry, apply for a course, or sign up to receive communications from us.
We are committed to protecting your privacy and handling your data in a way that is transparent, lawful, and fair. This policy is written in plain English because we believe you deserve to understand exactly what happens to your information.
What data we collect and why
We collect personal data in the following ways:
- Course applications via Google Forms: when you apply for a course we collect your name, email address, organisation or business name, job role, and the information you provide in your application. We use this to assess your application, contact you about your place, and administer the course.
- Email enquiries: when you email us directly we collect your name, email address, and any information you choose to include in your message. We use this to respond to your enquiry.
- Email newsletter sign-up via GoHighLevel: when you join our mailing list we collect your name and email address. We use this to send you newsletters, course updates, and relevant communications from Neuro-D. You can unsubscribe at any time using the link in any email we send you.
- Website visits: our website is hosted on Netlify, which may collect basic technical data including your IP address and browser type for the purposes of delivering the website and basic analytics. We do not currently use Google Analytics or other third-party tracking tools.
The legal basis for processing your data
We process your personal data on the following legal bases under the UK General Data Protection Regulation (UK GDPR):
- Contract: where processing is necessary to take steps at your request prior to entering into a contract, or to perform a contract with you. This applies to course applications and enrolments.
- Legitimate interests: where we have a legitimate interest in processing your data and that interest is not overridden by your rights. This applies to responding to direct enquiries.
- Consent: where you have given us clear consent to process your data for a specific purpose. This applies to newsletter sign-ups. You can withdraw your consent at any time.
Who we share your data with
We do not sell your personal data to any third party. We share your data only with the following service providers who help us operate our business:
- GoHighLevel (GHL): our email marketing and CRM platform. Your name and email address are stored here when you join our mailing list or are added as a contact. GHL is based in the United States and data transfers are covered by appropriate safeguards.
- Google: we use Google Forms to collect course applications and Google Workspace for email. Google's privacy policy applies to data processed through these services.
- Netlify: our website hosting provider. Netlify may process basic technical data as part of delivering our website. Netlify's privacy policy applies.
We may also disclose your data where required by law, regulation, or court order.
How long we keep your data
- Course application data: retained for the duration of the course and for 3 years after completion, in line with our contractual and legal obligations.
- Enquiry data: retained for 12 months from the date of last contact, unless a course enrolment or contract follows.
- Email newsletter data: retained until you unsubscribe or ask us to remove you from our list.
- Practitioner agreement data: retained for 6 years after the end of the agreement in line with standard contractual retention requirements.
Your rights
Under UK GDPR you have the following rights in relation to your personal data:
- The right to access: you can request a copy of the personal data we hold about you.
- The right to rectification: you can ask us to correct any inaccurate or incomplete data we hold about you.
- The right to erasure: you can ask us to delete your personal data in certain circumstances.
- The right to restrict processing: you can ask us to limit how we use your data in certain circumstances.
- The right to data portability: you can ask us to provide your data in a portable format in certain circumstances.
- The right to object: you can object to our processing of your data where we rely on legitimate interests as our legal basis.
- The right to withdraw consent: where we rely on consent you can withdraw it at any time without affecting the lawfulness of processing before withdrawal.
To exercise any of these rights, please email us at hello@neurodconsultancy.com. We will respond within one month.
Cookies
Our website may use cookies to help deliver the website and improve your experience. These may be set by Netlify as part of hosting the website, or by Google when you interact with embedded Google Forms.
We do not currently use advertising cookies or third-party tracking cookies. We will update this policy if that changes.
Security
We take the security of your personal data seriously. We use reputable third-party platforms with their own security measures and we limit access to your data to only those who need it to carry out their role.
No method of transmission over the internet is completely secure. If you have concerns about the security of your data, please contact us at hello@neurodconsultancy.com.
Changes to this policy
We may update this privacy policy from time to time. When we do we will update the date at the top of this page. We encourage you to review this policy periodically.
Contact us or make a complaint
If you have any questions about this privacy policy or how we handle your data, please contact us at hello@neurodconsultancy.com. Our business address is available on request.
If you are unhappy with how we have handled your data, you have the right to lodge a complaint with the UK Information Commissioner's Office (ICO) at ico.org.uk or by calling 0303 123 1113.