Effective date: 18 February 2026
Last updated: 14 August 2026

1. Who we are

NEURO INK CIC, trading as Neuro-Ink, respects your privacy and is committed to protecting your personal information.

For data protection purposes, NEURO INK CIC is the data controller responsible for deciding how and why your personal information is used.

Company name: NEURO INK CIC
Company number: 16149746
Registered office: Office 14c, 11–17 Fowler Road, Hainault, Essex, IG6 3UJ
Email: saleena@neuro-ink.ink
Telephone: 0203 740 5499

Neuro-Ink provides educational and community-focused services, including private teaching and tuition, educational consultancy, parental consultations and support, parenting groups, workplace neurodiversity consultancy and training, workshops, events, community initiatives and, where specifically offered, community-based childcare or crèche provision.

We process personal information in accordance with the UK General Data Protection Regulation, the Data Protection Act 2018 and other applicable UK data protection legislation.

2. Who this policy applies to

This Privacy Policy applies to personal information relating to:

• People who visit or contact us through our website
• Parents, carers and family members
• Children and young people receiving or being considered for services
• Individuals receiving consultations, teaching or support
• Representatives of schools, workplaces and other organisations
• Event and workshop attendees
• Donors and supporters
• Suppliers, partners and professional contacts

3. Personal information we may collect

Depending on how you interact with Neuro-Ink, we may collect the following information.

Identity and contact information

This may include:

• Name
• Postal address
• Email address
• Telephone number
• Date of birth or age, where relevant
• Parent or carer details
• Emergency contact details
• Name of a school, employer or organisation

Enquiry and communication information

This may include:

• Information submitted through contact forms
• Emails, telephone calls and messages
• Details of questions, concerns or requested support
• Records of our communications with you
• Complaints, feedback and survey responses

Service and booking information

Where you enquire about, book or receive a service, we may collect:

• The service requested
• Appointment, event or session details
• Attendance records
• Notes relevant to delivering the service
• Agreed adjustments or accessibility requirements
• Contract, invoicing and payment information
• Cancellation or rescheduling information

Where a third-party booking, event or payment provider is used, that provider may collect information directly under its own privacy policy. Neuro-Ink does not normally receive or store complete debit or credit card details.

Educational and developmental information

Where necessary to understand or support an individual’s needs, we may collect:

• Educational history
• Learning needs and preferences
• School-related information
• Developmental information
• Support plans, assessments or reports supplied to us
• Information about behaviour, communication or emotional wellbeing
• Notes and outcomes from teaching, consultations or support sessions

Special-category information

Some information may be particularly sensitive and receive additional legal protection. This may include information about:

• Physical or mental health
• Disability
• Neurodivergence or a suspected or confirmed diagnosis
• Racial or ethnic origin
• Religious or philosophical beliefs
• Other information revealed during the delivery of a service

We collect this information only where it is genuinely necessary and where we have an appropriate legal condition for doing so.

Safeguarding information

Where necessary, we may record:

• Safeguarding concerns
• Disclosures or allegations
• Relevant observations
• Actions taken
• Communications with parents, carers, schools, local authorities, police, healthcare professionals or safeguarding agencies

Safeguarding information may sometimes include special-category information or information relating to alleged criminal conduct. We handle this information with particular care and only where the law permits.

Photographs, video and recordings

We may collect photographs, video or audio recordings at events, workshops or activities where appropriate.

We will obtain suitable consent before using identifiable photographs or recordings for promotional purposes, particularly where children are involved.

Website and technical information

When you use our website, we may collect:

• Internet Protocol address
• Browser and device information
• Pages visited
• Approximate location derived from an IP address
• Referral source
• Website interactions
• Cookie preferences
• Technical and security logs

Non-essential analytics, advertising or similar technologies will be used only where the required cookie consent has been obtained.

Donation information

If you donate through a third-party fundraising platform, such as JustGiving, the platform will process your donation and payment information under its own privacy policy.

We may receive limited information about a donation where you have permitted the platform to share it with us.

4. How we collect personal information

We may receive personal information:

• Directly from you
• From a parent, carer or family member
• From a child or young person
• Through our website, email, telephone or social media
• Through a booking, payment, fundraising or event platform
• From a school, employer, professional, partner organisation or referrer
• From safeguarding agencies or public authorities
• From publicly available professional or organisational sources
• Automatically through cookies and website technologies

Where information is provided to us about another person, the person providing it should ensure they are authorised to do so and, where appropriate, make that person aware of this Privacy Policy.

5. How and why we use personal information

We may use personal information for the following purposes.

Responding to enquiries

We use contact and enquiry information to respond to questions, discuss possible services and provide requested information.

Our lawful bases are taking steps before entering into a contract and our legitimate interest in responding to enquiries and operating our organisation.

Providing services

We use personal information to arrange and deliver teaching, consultancy, parental support, training, events, workshops and related services.

Where the individual entering into the agreement is the person receiving the service, our lawful basis is usually contractual necessity.

Where information relates to a child or another person who is not a party to the contract, our lawful basis may be our legitimate interest in delivering the requested service safely and effectively, consent or another appropriate legal basis.

Understanding educational, accessibility and support needs

We use relevant information to understand an individual’s circumstances, make appropriate adjustments and provide suitable educational or practical support.

Our lawful basis for ordinary personal information is usually legitimate interests, consent or contractual necessity where applicable.

Where this includes health, disability, neurodivergence or other special-category information, we normally rely on explicit consent unless another legal condition clearly applies, such as safeguarding a child or an individual at risk.

Managing bookings and payments

We use booking, attendance, invoicing and payment information to administer appointments, events, cancellations, refunds and accounts.

Our lawful bases are contractual necessity, compliance with legal obligations and our legitimate interest in maintaining appropriate business and financial records.

Safeguarding

We may use and share information where necessary to identify, record, assess or respond to a safeguarding concern.

Our lawful bases may include legal obligation, legitimate interests, vital interests and conditions under data protection law relating to safeguarding children and individuals at risk.

Where appropriate and lawful, safeguarding responsibilities may take priority over confidentiality or consent.

Communicating with you

We use contact information to provide appointment information, service updates and other necessary communications.

Our lawful bases are contractual necessity and our legitimate interest in keeping people informed about services they have requested.

Improving our services

We may use feedback, service information and appropriately anonymised data to evaluate and improve our services, training and website.

Our lawful basis is our legitimate interest in maintaining and improving the quality and effectiveness of our work.

Legal, regulatory and financial administration

We may use information to:

• Maintain accounting and tax records
• Manage complaints
• Establish, exercise or defend legal claims
• Meet insurance requirements
• Respond to regulators, courts or public authorities
• Prevent fraud, misuse or security incidents

Our lawful bases are legal obligation and our legitimate interest in protecting Neuro-Ink and the people who use our services.

Marketing and service updates

We may send news or promotional information where you have consented or where another lawful permission applies.

You may unsubscribe or object to direct marketing at any time by using the unsubscribe option provided or contacting saleena@neuro-ink.ink.

We will not sell your personal information to marketing organisations.

6. Our legitimate interests

Where we rely on legitimate interests, those interests may include:

• Responding to enquiries
• Operating and administering Neuro-Ink
• Delivering safe and effective services
• Supporting parents, carers, children, individuals and organisations
• Improving our website and services
• Maintaining appropriate records
• Protecting our legal rights
• Preventing misuse, fraud and security incidents

Before relying on legitimate interests, we consider whether the processing is necessary and whether an individual’s rights and interests override our interests. We take particular care where information relates to children or vulnerable individuals.

7. Children’s personal information

Children are entitled to the same data protection rights as adults, and their personal information requires particular protection.

When we process information relating to a child or young person, we will:

• Treat their best interests as an important consideration
• Collect only information genuinely needed for the relevant service
• Explain the use of their information in a clear and age-appropriate way where appropriate
• Use suitable security and confidentiality measures
• Take particular care when sharing their information
• Obtain parent or carer consent where required
• Consider the child’s age, understanding and ability to exercise their own data protection rights

A parent or carer will not automatically be entitled to exercise data protection rights on behalf of a child in every situation. We will consider the child’s age, understanding, best interests and the circumstances of the request.

A child-friendly explanation of how we use personal information can be provided on request.

8. When you must provide information

Some information is required so that we can:

• Respond to an enquiry
• Assess whether a service is suitable
• Enter into or perform an agreement
• Deliver a service safely
• Meet safeguarding or legal obligations
• Process a booking or payment

If required information is not provided, we may be unable to accept a booking, deliver a service or continue providing support.

We will explain when information is required and, where relevant, what may happen if it is not provided.

9. Sharing personal information

We do not sell personal information.

Where necessary and lawful, we may share information with:

• Parents, carers or authorised representatives
• Schools, workplaces, referrers and partner organisations
• Individuals or organisations helping to deliver an agreed service
• Website hosting, email, cloud storage and IT support providers
• Booking, event, payment and fundraising providers
• Accountants, insurers, legal advisers and other professional advisers
• Local authorities, safeguarding organisations, healthcare professionals or social services
• Police and other emergency services
• HM Revenue & Customs, courts, regulators and government authorities
• Other parties where disclosure is required or permitted by law

Service providers acting on our behalf are expected to protect personal information, use it only for agreed purposes and comply with applicable data protection requirements.

We will not routinely share a child’s information with a school, employer or other organisation without an appropriate reason and lawful basis.

10. Website services and external providers

Depending on which website features you use and your cookie choices, the website may use services provided by third parties, including:

• Website hosting and security providers
• Google services, such as embedded Google Maps and consented website analytics
• JustGiving or another fundraising platform
• An appointment or booking platform, if introduced
• An event platform, such as Eventbrite, if introduced
• A payment processor, if online payments are introduced
• Social media platforms when you follow an external link

These providers may receive technical or personal information when their services are used. Some operate as processors acting on our instructions, while others are independent data controllers responsible for their own use of personal information.

You should review the privacy information supplied by the relevant provider before submitting information through an external service.

11. International transfers

Some website, cloud, booking, event, payment or communications providers may store or process personal information outside the United Kingdom.

Where personal information is transferred internationally, we will take reasonable steps to ensure the transfer is lawful and appropriately protected. Depending on the destination and provider, this may include:

• UK adequacy regulations
• The UK International Data Transfer Agreement
• The UK Addendum to approved standard contractual clauses
• Another safeguard or exception permitted by data protection law

You may contact us for more information about the safeguards used for a particular transfer.

12. Data security

We use reasonable organisational and technical measures to protect personal information from accidental loss, unauthorised access, misuse, alteration or disclosure.

Measures may include:

• Password-protected systems
• Restricted access
• Confidential handling procedures
• Appropriate website and account security
• Software and system updates
• Secure service providers
• Backups where appropriate
• Staff or contractor confidentiality requirements

Access to personal information is limited to people who need it for a legitimate purpose.

If a personal data breach occurs, we will assess it and notify affected individuals and the Information Commissioner’s Office where legally required.

13. How long we retain information

We retain personal information only for as long as reasonably necessary for the purpose for which it was collected and to meet legal, safeguarding, insurance, contractual and accounting requirements.

Our usual retention periods or criteria are:

• General enquiries that do not lead to a service: normally up to 12 months after the last meaningful contact
• Service, consultation, teaching and booking records: normally up to six years after the service or agreement ends
• Financial, invoice and transaction records: normally six years after the end of the relevant financial year
• Marketing consent records: until consent is withdrawn, followed by a limited suppression record to ensure the person is not contacted again
• Website security and technical logs: for the period reasonably required for security, troubleshooting and fraud prevention
• Cookie and analytics information: for the periods identified in our Cookie Policy or by the relevant provider
• Photographs and recordings: until the relevant purpose ends or consent is withdrawn, subject to material already lawfully printed or published
• Safeguarding records: for the period required by safeguarding practice, legal obligations, insurance requirements and the need to protect children or individuals at risk
• Records relevant to a complaint or legal claim: until the applicable complaint or legal limitation period has ended

Some records may be kept for longer where necessary because of safeguarding concerns, an ongoing dispute, a legal requirement or the need to establish, exercise or defend legal claims.

When information is no longer required, we will securely delete, anonymise or dispose of it.

14. Your data protection rights

Depending on the circumstances and our lawful basis for processing, you may have the right to:

• Ask for confirmation that we process your personal information
• Request a copy of your personal information
• Ask us to correct inaccurate or incomplete information
• Ask us to delete information where applicable
• Ask us to restrict the use of information
• Object to certain uses of information
• Request the transfer of information in a portable format where applicable
• Withdraw consent at any time where processing is based on consent
• Object to direct marketing at any time
• Complain to the Information Commissioner’s Office

These rights are not absolute and may be limited by safeguarding, legal, regulatory or other lawful requirements.

Withdrawing consent will not affect processing that was lawful before consent was withdrawn.

To exercise a right, contact:

Email: saleena@neuro-ink.ink
Postal address: NEURO INK CIC, Office 14c, 11–17 Fowler Road, Hainault, Essex, IG6 3UJ

We may need to verify your identity before completing a request. We normally respond within one month and do not usually charge a fee.

15. Your right to object

You have the right to object to the use of your personal information where we rely on legitimate interests.

If you object, we will stop the relevant processing unless we can demonstrate compelling legitimate grounds to continue or the information is required to establish, exercise or defend legal claims.

You have an absolute right to object to the use of your personal information for direct marketing.

16. Automated decision-making

Neuro-Ink does not currently use personal information to make solely automated decisions that produce legal or similarly significant effects.

If this changes, we will update this Privacy Policy and provide the information required by law.

17. Cookies

Our website uses cookies and similar technologies.

Cookies that are strictly necessary for the website to function may be used without consent. Non-essential cookies, including relevant analytics or external media cookies, will be used only after the required consent has been obtained.

You can manage your preferences using the website’s cookie controls.

Please see our Cookie Policy for more information about the cookies used, their purposes and how long they remain on your device.

18. External websites

Our website may contain links to external websites and services, including social media, booking, event, mapping and fundraising platforms.

Neuro-Ink is not responsible for the privacy practices of external organisations. You should read their privacy policies before providing personal information.

19. Complaints

We would appreciate the opportunity to address a data protection concern first. Please contact us at saleena@neuro-ink.ink.

You also have the right to complain to the Information Commissioner’s Office:

Information Commissioner’s Office
Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF

Telephone: 0303 123 1113
Website: https://ico.org.uk/make-a-complaint/

20. Changes to this Privacy Policy

We may update this Privacy Policy to reflect changes to our services, website, providers, legal obligations or data-handling practices.

The latest version will be published on this page with an updated revision date. Where a change materially affects how we use personal information, we will take reasonable steps to bring it to the attention of affected individuals.

21. Contact us

For questions, requests or concerns relating to this Privacy Policy or the use of personal information, contact:

NEURO INK CIC
Trading as Neuro-Ink
Company number: 16149746
Office 14c
11–17 Fowler Road
Hainault
Essex
IG6 3UJ

Email: saleena@neuro-ink.ink
Telephone: 0203 740 5499