Legal
Privacy policy
Last updated 27 October 2026
Who we are
ADHD Explained (adhdexplained.org) is the data controller for personal data collected through this website and course. Contact: hello@adhdexplained.org. [Legal entity name and postal address to be added.]
What we collect
- When you enrol: your name and email address, so we can give you access, send receipts and support you.
- Payments: processed by Stripe. We never see or store your full card details.
- Course progress: which lessons you have completed, so you can pick up where you left off. Private reflection exercises are stored on your own device unless you choose otherwise.
- Website analytics: basic, privacy-friendly usage statistics. [Analytics provider to be confirmed.]
We do not ask for health information, and you never need to tell us whether you have ADHD.
Why we use it
To provide the course you have bought (contract), to meet legal and tax obligations (legal obligation), and to improve the site (legitimate interests). We only send marketing emails if you opt in, and you can unsubscribe at any time.
How long we keep it
Account and purchase records are kept for as long as you have access to the course and for the period required by UK tax law afterwards. [Retention periods to be confirmed.]
Your rights
Under UK GDPR you can ask to access, correct, delete or export your data, or object to how we use it. Email us and we will respond within one month. You can also complain to the Information Commissioner’s Office (ICO).
Cookies
We use only the cookies needed for the site and course to work, plus [analytics cookies, if any — to be confirmed once analytics are chosen].