Privacy Notice
Managing on the Spectrum
Last updated: September 2026. This notice explains, in plain language, what personal information I collect, why I collect it, and how I look after it. If anything here is unclear, just ask me.
Who I am
Managing on the Spectrum is a neurodiversity mentoring service run by Dan Wilkins. I am the data controller for the information described here, which means I am responsible for looking after it.You can contact me at info@managingonthespectrum.co.uk.
What I collect
Depending on how we work together, I may hold:
•Your name and contact details (email, phone).
•Information you share on the mentoring profile form and in our sessions, which can include information about your neurodivergence, mental health, work, and everyday challenges.
•Session notes, and, where you have agreed to it, session transcripts.
•Booking and scheduling details.
•Payment and invoicing records.
If your mentoring is funded through Access to Work, this includes the relevant reference and award details.
I never see or store your card number, that is handled securely by my payment provider.
Some of what you share is “special category” information (for example, about your health or diagnosis). This is the most sensitive kind of personal data, and I treat it accordingly.
Why I hold it and my lawful basis
I use your information to provide the mentoring you have asked for, to arrange and run our sessions, and to handle payment. My lawful basis is the contract between us (delivering the service you have signed up for). For the more sensitive health-related information, I rely on your explicit consent, which you give freely and can withdraw at any time.
Transcribing
I only record a session if you have agreed to it beforehand, and you can decline or change your mind at any time without it affecting your mentoring. Where you agree, I use the transcript to produce accurate notes and then delete the transcript once that is done.
Who I share it with
I do not sell your information or share it with anyone for marketing. I use a small number of trusted tools to run the business (for email and file storage, video sessions, transcription, scheduling and payments), and your information is stored within those. Some of these providers are based outside the UK; where that is the case, they operate under safeguards designed to protect your data.I will only share your information with someone else if you ask me to, or if I am ever legally required to (for example, if there were a serious risk to someone’s safety).
How long I keep it
I keep your information only for as long as I need it. Session recordings are deleted once transcribed. Notes and transcripts are kept for the duration of our work together and a reasonable period afterwards, then deleted. Financial records are kept for as long as the law requires.
How I keep it safe
Your information is stored securely, in access-restricted locations, protected by two-factor authentication and device encryption. I collect only what I genuinely need to support you.
Your rights
You have the right to:
•Ask to see the information I hold about you.
•Ask me to correct anything that is wrong.
•Ask me to delete your information.
•Withdraw your consent to anything you previously agreed to.
Just email me and I will respond within one month, at no charge.
Data Protection Complaints Process
Managing on the Spectrum Last updated: September 2026
UK law (the Data (Use and Access) Act 2025) requires every business that handles personal data to have a clear process for dealing with data protection complaints. This is mine. It is short by design, because the business is one person, but it is followed properly.
For clients: how to raise a concern
If you are ever unhappy with how your personal information has been handled, you can tell me directly:
-
Please put “Data concern” in the subject line if you can, so I spot it quickly.
You do not need to use any special wording. Just tell me what has happened and what you would like me to do.
What happens next
-
I acknowledge it within 5 working days, so you know it has reached me and is being looked at.
-
I look into it properly, gather the facts, and aim to give you a full response and resolve it within 30 days. If it is complex and needs longer, I will tell you why and keep you updated.
-
If you are still not happy with my response, you have the right to escalate to the Information Commissioner’s Office (ICO), the UK’s independent data protection regulator, at ico.org.uk or on 0303 123 1113.