Privacy Policy

Last updated & Effective from 12 September 2025

Website: https://neurodiversetales.co.uk
Contact: help.neurodiversetales@gmail.com
Controller: Neurodiverse Tales (sole trader) – [Insert legal name and postal address]
Representative (if outside the UK/EEA): Not applicable.

This Privacy Policy explains how we collect, use, disclose, and protect your information when you visit our website, make a purchase, or otherwise interact with Neurodiverse Tales (“we”, “us”, “our”). It applies to visitors, customers, and newsletter subscribers (“you”).

If you do not agree with this Policy, please do not use our website or services.

1) Information We Collect

We collect information in three ways: you provide it, it’s collected automatically, or we receive it from third parties.

a) Information you provide

• Contact & account details: name, email address, phone (optional), billing and delivery addresses.

• Order details: products purchased, notes you add at checkout.

• Payment details: handled securely by our payment processor(s). We do not store full card numbers.

• Customer support: messages you send us by email or contact form.

• Marketing preferences: your newsletter opt-in/opt-out choices.

b) Information collected automatically

• Technical & usage data: IP address, device and browser type, pages viewed, time on page, referring site, and general location (city/country level).

• Cookies and similar tech: used for site functionality, analytics, and (if you agree) marketing. See our Cookies Policy for details and choices.

c) Information from third parties

• Payment processors (e.g., card gateways) – confirmation of payment and fraud-prevention signals.

• Fulfilment & carriers – tracking updates and delivery confirmations.

• Analytics/marketing providers – aggregated insights about how our site is used (no sensitive categories).

2) How We Use Your Information & Legal Bases

We process your personal data only where we have a lawful basis under the UK GDPR and Data Protection Act 2018:

• To fulfil your order and provide customer service (contract).

• To send service messages (e.g., order confirmations, delivery updates) (contract/legal obligation).

• To run the website, troubleshoot, keep it secure, and improve it (legitimate interests).

• To prevent and detect fraud and misuse (legitimate interests/legal obligation).

• To send marketing emails where you opt in, and to measure their performance (consent).

• To comply with tax, accounting, and other legal duties (legal obligation).

Where we rely on consent, you can withdraw it at any time (this won’t affect past processing done lawfully).

3) Sharing Your Information

We share data only when necessary:

• Payment processors – to take payments securely.

• Drop-shipping/fulfilment partners & couriers – to prepare and deliver your order.

• IT, hosting, analytics, and email service providers – to operate our site and communications.

• Professional advisers and authorities – where required for legal, tax, or fraud-prevention reasons.

All providers are chosen for strong security; they act on our instructions and must not use your data for their own purposes.

We do not sell your personal data.

4) International Transfers

Some providers may process data outside the UK/EEA. Where this occurs, we use adequacy decisions (if available) or Standard Contractual Clauses plus additional safeguards, to ensure an equivalent level of protection.

5) How We Protect Your Information

We use administrative, technical, and physical safeguards appropriate to the nature of the data, including TLS encryption in transit, access controls, and data minimisation. No system is perfectly secure; we maintain and test controls and limit access to a need-to-know basis.

6) How Long We Keep Your Information

We keep personal data only as long as needed for the purposes set out here:

• Orders & invoices: typically 6 years (UK tax/audit rules).

• Customer support emails: up to 2 years after resolution.

• Marketing records: until you unsubscribe or your consent is withdrawn.

• Website analytics: retained in aggregate or pseudonymised form where possible.

We securely delete or anonymise data when retention ends.

7) Your Rights (UK/EEA)

You may have the following rights, subject to limits in law:

• Access your personal data.

• Rectify inaccurate or incomplete data.

• Erase your data (where applicable).

• Restrict or object to processing (especially where we rely on legitimate interests).

• Portability of data you provided to us in a structured, commonly used format.

• Withdraw consent at any time for marketing or cookies based on consent.

To exercise your rights, email help.neurodiversetales@gmail.com. We will respond within one month.
You also have the right to complain to the UK Information Commissioner’s Office (ICO): ico.org.uk / +44 (0)303 123 1113.

8) Children’s Privacy

Our products are purchased by adults for children. We do not knowingly collect personal data directly from children under 13 (or the age set by local law). If you believe a child has provided us personal data, contact us to remove it.

9) Cookies & Similar Technologies

We use cookies and similar technologies for essential site functions, analytics, and (if you agree) marketing. You can manage preferences through our cookie banner and your browser settings. See our Cookies Policy for details, including a list of cookies and retention periods.

10) Interest-Based Advertising

If we use interest-based (behavioural) advertising, it will be based on your consent via the cookie banner. You can withdraw consent at any time via cookie settings. Opt-outs on browsers and major platforms may also reduce personalised ads.

11) Drop-Shipping & Carriers

We work with trusted third-party fulfilment partners. We will share only the data required to ship your order (name, delivery address, contact details, and order contents). Those partners will process your data as independent controllers for delivery purposes and under their own privacy notices.

12) Additional Disclosures for United States Residents (if you access from the US)

We do not target US residents specifically; however, to the extent applicable US state laws (e.g., California) apply to your use of our site, you may have rights to know/access, delete, correct, opt-out of sale/share, and limit use of sensitive data. We do not “sell” personal data as those laws define the term, nor do we process sensitive data for the purpose of inferring characteristics. To exercise any US-specific rights, contact help.neurodiversetales@gmail.com with “US Privacy Request” in the subject.

13) Third-Party Links & Marketplaces

Our site may link to third-party websites or marketplaces. Their privacy practices are governed by their own policies. Please review those before providing personal data.

14) Automated Decision-Making

We do not use solely automated decisions that produce legal or similarly significant effects. If this changes, we will inform you and explain your rights.

15) Changes to This Policy

We may update this Policy from time to time. If changes are material, we will post a clear notice on our website and adjust the “Published” and “Takes effect” dates above. The version in force at the time of your order applies to that order.

16) Contact Us

Questions, requests, or complaints about this Policy or your data?
Email: help.neurodiversetales@gmail.com

​

“Neurodiverse Tales is the data controller for personal data processed via this website. For data rights or privacy queries, contact help.neurodiversetales@gmail.com.”

• “Cookies: manage your preferences anytime via the cookie banner. See our Cookies Policy for details.”