Privacy policy

Who we are

The Neurodiversity Design Council (NDC) is operated by Common People Consultancy, a UK-based consultancy. Our contact email is hello@thendc.org.uk. We are the data controller for personal data collected through this website.

What data we collect

We collect personal data only when you provide it to us directly. This includes:

Register interest form: your email address.

Client portal submission: your name, email address, organisation name, and details of the product you submit for assessment, including any files you upload.

Job applications: your name, email address, and any information you include in your application (CV, portfolio links, or other materials).

Contact form and email: your name, email address, and the content of your message.

How we use your data

We use your data to respond to your enquiry or application, to deliver our assessment services, and to contact you when assessments open if you registered interest. We do not send marketing emails unless you have specifically opted in. We do not share, sell, or transfer your data to any third party except where required by law.

Our lawful basis for processing is legitimate interest (responding to your enquiry and delivering services you have requested) and, where applicable, consent (registering interest in future communications).

Data storage and retention

Form submissions are processed through Netlify Forms and stored securely. We retain your data only for as long as necessary to fulfil the purpose for which it was collected. Waiting list emails are retained until assessments open and you have been contacted. Client data is retained for the duration of the assessment and certification period plus 12 months. Application data is retained for 6 months after the recruitment process concludes.

Cookies and analytics

This site uses Plausible Analytics, a privacy-focused analytics service that does not use cookies, does not collect personal data, and is fully compliant with GDPR, PECR, and CCPA. No cookie consent banner is required because no cookies are set. We do not use Google Analytics, Facebook Pixel, or any other tracking technology.

Your rights

Under UK GDPR, you have the right to access your personal data, request correction or deletion, object to processing, and request data portability. To exercise any of these rights, email hello@thendc.org.uk.

If you are not satisfied with how we handle your data, you have the right to complain to the Information Commissioner's Office (ICO) at ico.org.uk.

Changes to this policy

We may update this policy from time to time. The date at the top of this page shows when it was last updated. We will not reduce your rights under this policy without your consent.