Privacy Policy

This is the privacy policy of Neurodiverse Thinking, the business that runs the website ndthinking.com. (‘we’, ‘our’, or ‘us’).

Our office is at 21 Balleigh Court, Ramsey, Isle of Man, IM8 3NP.

Neurodiverse Thinking website is owned by Emma Butler, who is a data controller of your personal data. Emma Butler can be contacted by emailing emma@ndthinking.com or by phoning 07624 381518.

We have adopted this Privacy Policy, which determines how we are processing the information collected by Neurodiverse Thinking, which also provides the reasons why we must collect certain personal data about you. Therefore, you must read this Privacy Policy before using the Neurodiverse Thinking website.

We take care of your personal data and undertake to guarantee its confidentiality and security.

Personal information we collect:

When you visit the ndthinking.com, we automatically collect certain information about your device, including information about your web browser, IP address, time zone, and some of the installed cookies on your device. Additionally, as you browse the Site, we collect information about the individual web pages or products you view, what websites or search terms referred you to the Site, and how you interact with the Site. We refer to this automatically-collected information as “Device Information.” Moreover, we might collect the personal data you provide to us (including but not limited to Name, Surname, Address, payment information, etc.) during registration to be able to fulfill the agreement.

Why do we process your data?

Our top priority is customer data security, and, as such, we may process only minimal user data, only as much as it is absolutely necessary to maintain the website. Information collected automatically is used only to identify potential cases of abuse and establish statistical information regarding website usage. This statistical information is not otherwise aggregated in such a way that it would identify any particular user of the system.

You can visit the website without telling us who you are or revealing any information, by which someone could identify you as a specific, identifiable individual. If, however, you wish to use some of the website’s features, or you wish to receive our newsletter or provide other details by filling a form, you may provide personal data to us, such as your email, first name, last name, city of residence, organization, telephone number. You can choose not to provide us with your personal data, but then you may not be able to take advantage of some of the website’s features. For example, you won’t be able to receive our Newsletter or contact us directly from the website. Users who are uncertain about what information is mandatory are welcome to contact us via emma@ndthinking.com.

Links to other websites:

Our website may contain links to other websites that are not owned or controlled by us. Please be aware that we are not responsible for such other websites or third parties' privacy practices. We encourage you to be aware when you leave our website and read the privacy statements of each website that may collect personal information.

Third party advertising:

Third parties may advertise on our website. In doing so, those parties, their agents or other companies working for them may use technology that automatically collects information about you when their advertisement is displayed on our website.

They may also use other technology such as cookies or JavaScript to personalise the content of, and to measure the performance of their adverts.

We do not have control over these technologies or the data that these parties obtain. Accordingly, this privacy notice does not cover the information practices of these third parties.

Information security:

We secure information you provide on computer servers in a controlled, secure environment, protected from unauthorized access, use, or disclosure. We keep reasonable administrative, technical, and physical safeguards to protect against unauthorized access, use, modification, and personal data disclosure in its control and custody. However, no data transmission over the Internet or wireless network can be guaranteed.

Legal disclosure:

We will disclose any information we collect, use or receive if required or permitted by law, such as to comply with a subpoena or similar legal process, and when we believe in good faith that disclosure is necessary to protect our rights, protect your safety or the safety of others, investigate fraud, or respond to a government request.

Other matters

Your rights:

The law requires us to tell you about your rights and our obligations to you in regard to the processing and control of your personal data.
We do this now, by requesting that you read the information provided at http://www.knowyourprivacyrights.org and https://www.inforights.im/

If you are a European resident, you have the following rights related to your personal data:

• The right to be informed.

• The right of access.

• The right to rectification.

• The right to erasure.

• The right to restrict processing.

• The right to data portability.

• The right to object.

• Rights in relation to automated decision-making and profiling.

If you would like to exercise this right, please contact us through the contact information above.

Additionally, if you are a European resident, we note that we are processing your information in order to fulfill contracts we might have with you (for example, if you make an order through the Site), or otherwise to pursue our legitimate business interests listed above. Additionally, please note that your information might be transferred outside of Europe, including Canada and the United States.

Use of our services by children:

We do not sell products or provide services for purchase by children.

If you are under 18, you may use our website only with consent from a parent or guardian.

We collect data about all users of and visitors to these areas regardless of age, and we anticipate that some of those users and visitors will be children.

Encryption of data sent between us:

We use Secure Sockets Layer (SSL) certificates to verify our identity to your browser and to encrypt any data you give us.
Whenever information is transferred between us, you can check that it is done so using SSL by looking for a closed padlock symbol or other trust mark in your browser’s URL bar or toolbar.

Delivery of services using third party communication software:

With your consent, we may communicate using software provided by a third party such as Facebook (WhatsApp, Messenger).
Such methods of communication should secure your personal data using encryption and other technologies. The providers of such software should comply with all applicable privacy laws, rules, and regulations, including the GDPR.

If you have any concerns about using a particular software for communication, please tell us.

Data may be processed outside the UK:

Our websites are hosted on a global network of host servers.

We may also use outsourced services in countries outside the UK and Isle of man from time to time in other aspects of our business.

Accordingly data obtained within the UK and Isle of Man or any other country could be processed outside the UK and Isle of Man.

Control over your own information:

It is important that the personal data we hold about you is accurate and up to date. Please inform us if your personal data changes.

At any time, you may contact us to request that we provide you with the personal data we hold about you.
When we receive any request to access, edit or delete personal data we first take reasonable steps to verify your identity before granting you access or otherwise taking any action. This is important to safeguard your information.
Please be aware that we are not obliged by law to provide you with all personal data we hold about you, and that if we do provide you with information, the law allows us to charge for such provision if doing so incurs costs for us. After receiving your request, we will tell you when we expect to provide you with the information, and whether we require any fee for providing it to you.

If you wish us to remove personally identifiable information from our website, you should contact us to make your request.

This may limit the service we can provide to you.

We remind you that we are not obliged by law to delete your personal data or to stop processing it simply because you do not consent to us doing so. While having your consent is an important consideration as to whether to process it, if there is another legitimate basis on which we may process it, we may do so on that basis.

Communicating with us:

When you contact us, whether by telephone, through our website or by email, we collect the data you have given to us in order to reply with the information you need.

We record your request and our reply in order to increase the efficiency of our business.

We may keep personally identifiable information associated with your message, such as your name and email address so as to be able to track our communications with you to provide a high quality service.

Complaining:

If you are not happy with our privacy policy, or if you have any complaint, then you should tell us by contacting us at emma@ndthinking.com.

When we receive a complaint, we record the information you have given to us on the basis of consent. We use that information to resolve your complaint.

We aim to investigate all complaints relating to user generated content. However, we may not be able to do so as soon as a complaint is made. If we feel that it is justified or if we believe that the law requires us to do so, we shall remove the content while do so.

Making a complaint may not result in the removal of the content. Ultimately, we have to make a judgment as to whose right will be obstructed: yours, or that of the person who posted the content that offends you.

If we think your complaint is vexatious or without any basis, we shall not correspond with you about it.
If your complaint reasonably requires us to notify some other person, we may decide to give to that other person some of the information contained in your complaint. We do this as infrequently as possible, but it is a matter for our sole discretion whether we do give information, and if we do, what that information is.

We may also compile statistics showing information obtained from this source to assess the level of service we provide, but not in a way that could identify you or any other person.
If a dispute is not settled then we hope you will agree to attempt to resolve it by engaging in good faith with us in a process of mediation or arbitration.

If you are in any way dissatisfied about how we process your personal data, you have a right to lodge a complaint with the Isle of Man Information Commissioner. This can be done by writing to the following address:

First Floor
Prospect House
Douglas
Isle of Man
IM1 1ET

We would, however, appreciate the opportunity to talk to you about your concern before you approach the Information Commissioner.

Retention period:

Except as otherwise mentioned in this privacy notice, we keep your personal data only for as long as required by us:

• to provide you with the services you have requested
• to comply with other law, including for the period demanded by our tax authorities
• to support a claim or defence in court

Compliance with the law:

Our privacy policy complies with the law in the Isle of Man, specifically with the Data Protection Act 2018 (the ‘Act’) accordingly incorporating the EU General Data Protection Regulation (‘GDPR’).

Review of this privacy policy:

We shall update this privacy notice from time to time as necessary.