Privacy policy

Last updated October 2026

Who we are

The Neurodiversity Design Council (NDC) is operated by Outside of the Fox, a design and learning studio in Stockport. Our contact email is hello@thendc.org.uk. We’re the data controller for personal data collected through this website.

What data we collect

We collect personal data only when you provide it to us directly. This includes:

Register interest form: your email address.

Assessment submission form: your name, email address, organisation name and details of the product you submit for assessment, including any files you upload.

Insights updates: your email address, if you sign up to hear when a new article is published.

Job applications: your name, email address and any information you include in your application (CV, portfolio links or other materials).

Contact form and email: your name, email address and the content of your message.

How we use your data

We use your data to respond to your enquiry or application, to deliver our assessment services and to contact you when assessments open if you registered interest, and to tell you about new articles if you signed up for them. We don’t send marketing emails unless you have specifically opted in. We don’t share, sell or transfer your data to any third party except where required by law.

Our lawful basis for processing is legitimate interest (responding to your enquiry and delivering services you have requested) and, where applicable, consent (registering interest in future communications).

Data storage and retention

Form submissions are processed through Netlify Forms and stored securely. We retain your data only for as long as necessary to fulfil the purpose for which it was collected. Waiting list emails are retained until assessments open and you have been contacted. Client data is retained for the duration of the assessment and certification period plus 12 months. Application data is retained for 6 months after the recruitment process concludes.

Cookies, analytics and settings

This site uses Plausible Analytics, a privacy-focused analytics service that doesn’t use cookies, doesn’t collect personal data and is fully compliant with GDPR, PECR and CCPA. No cookie consent banner is required because no cookies are set. We don’t use Google Analytics, Facebook Pixel or any other tracking technology. The fonts on this site are hosted here too, so loading a page sends nothing to a font service.

If you use the ‘Make this easier to read’ button, your browser stores that one setting on your own device so the next page opens the same way. It isn’t sent to us, and clearing your browser’s site data removes it.

Your rights

Under UK GDPR, you have the right to access your personal data, request correction or deletion, object to processing and request data portability. To exercise any of these rights, email hello@thendc.org.uk.

If you aren’t satisfied with how we handle your data, you have the right to complain to the Information Commissioner’s Office (ICO) at ico.org.uk.

Changes to this policy

We may update this policy from time to time. The date at the top of this page shows when it was last updated. We won’t reduce your rights under this policy without your consent.