Privacy Policy

Last updated: July 2026

1. Introduction

This Privacy Policy explains how ADHSpace collects, uses, stores, and protects personal information when you use the platform. ADHSpace is a discovery and connection platform for people seeking ADHD-informed professional support. ADHSpace is primarily designed for adults aged 18 and over, but may also be used by adults seeking support in relation to a child, partner, or family member affected by ADHD. ADHSpace is operated from the United Kingdom and acts as the data controller for personal information collected through this platform. By using ADHSpace, you agree to the practices described in this policy. This policy is written in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

2. Data Controller & ICO Registration

ADHSpace is the data controller for personal information collected through this platform. ADHSPACE LTD is registered with the UK Information Commissioner's Office (ICO) as a data controller and processes personal data in accordance with applicable UK data protection legislation, including the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. ICO Registration Reference: ZC168336 We are committed to handling personal information responsibly, securely and transparently. For data protection enquiries, contact: hello@adhspace.com

3. Information We Collect

From clients and visitors

• Name and email address (when submitting an enquiry or intro call request) • Optional phone number (when provided via the enquiry form) • Questionnaire responses (ADHD situation, support needs, preferred professional roles, areas of difficulty, specialisation preferences, session format, budget, availability, language, urgency, age bracket, gender preference for professional) • Age bracket • Messages and free-text fields submitted to professionals • Insurance preference (whether the user wishes to use private health insurance, selected via the questionnaire or enquiry form) • Insurance provider name (where optionally provided by the user in an enquiry form) • Messages submitted to the AI Matching Assistant, and information extracted from those messages (such as support needs, preferred approach, gender/language/location preferences, and budget) • Interactions with homepage pills and directory filters, used to understand which topics and filters are most useful to visitors • Problem or issue reports submitted via the "Report an issue" feature, including any description and technical details provided • Basic usage and analytics data

From professionals (account holders)

• Name and email address • Optional phone number (for internal ADHSpace use only; not displayed publicly) • Professional roles (one or more roles, ranked in order of primary practice) • Credentials, biography, and years of experience • Areas of support (primary and additional), specialisations (primary and additional), and therapy approaches (primary and additional) • Languages spoken • Pricing, session length, and service format • Payment options (e.g. pay per session, packages, retainers, payment plans — self-declared; not financial credentials) • Availability and visibility status • Gender identity (where voluntarily provided; treated as special category data — see Section 4a) • Private health insurance acceptance status and accepted insurance providers (where provided by the professional) • Profile photo • Intro video link • Accreditation, certification, and supporting document uploads • Professional website URL • Payment link URL (where provided for display on the public profile or for sending to clients — transmitted only; not stored as financial or payment credentials) • Client and session data added via the professional dashboard, including meeting links associated with sessions • Dashboard activity and preferences

Verification and authentication data

• Email address and one-time verification codes used during professional sign-in • Verification tokens are temporary and expire after use or a set time period

Technical information

• Device and browser information • IP address • Page interactions and site usage • Basic analytics data

4. Lawful Basis for Processing

We process personal data on the following lawful bases under UK GDPR: • Contract: To provide the platform service to professionals and fulfil obligations related to professional accounts and applications • Legitimate interests: To operate and improve the platform, moderate content, prevent abuse, send service-related communications, and match users with relevant professionals • Consent: Where you have explicitly provided consent, such as when submitting an enquiry and agreeing for your details to be shared with a professional • Legal obligation: Where we are required to process data to comply with applicable law Where we rely on legitimate interests, you have the right to object to that processing. See Section 17 for your rights.

4a. Special Category Data — Gender Identity

Gender identity is special category data under UK GDPR Article 9. Where a professional voluntarily provides their gender identity and chooses to display it publicly on their profile, ADHSpace processes this data on the basis of explicit consent — specifically, the professional's active choice to provide and display this information. Gender identity data is: • Only collected where voluntarily provided by the professional • Only displayed publicly where the professional has explicitly enabled public display via their dashboard settings • Never inferred, assumed, or collected without the professional's active input • Stored securely and accessible only to the professional and ADHSpace administrators Professionals may update or remove their gender identity at any time via their dashboard.

5. How We Use Information

We use the information we collect to: • Match users with relevant professionals based on questionnaire responses — including preferred roles, areas, specialisations, approaches, insurance preferences, and other ADHD-related criteria • Forward enquiries and intro call requests to the appropriate professional • Enable professionals to manage their profiles, clients, and sessions via the dashboard • Transmit optional payment links entered by professionals to the relevant client via email or display on the public profile • Send email communications (approval notices, enquiry notifications, session reminders, automatic pre-session reminders where enabled, meeting link reminders, payment link emails, verification codes, account-related emails) • Review professional applications and verify submitted accreditations • Provide admin oversight and platform moderation • Improve the platform, matching experience, and overall service • Prevent abuse or misuse of the platform • Power the AI Matching Assistant, including extracting relevant support needs from user messages and recommending professionals • Detect messages to the AI Matching Assistant that indicate a possible safety or crisis concern, so that appropriate crisis resources can be shown to the user • Understand which homepage pills and directory filters are used most, to improve search and navigation • Investigate and resolve issues reported via the "Report an issue" feature Insurance preference data (whether a user wishes to use private health insurance, and any insurance provider name they provide) is used solely to improve matching results and search relevance. ADHSpace does not verify insurance coverage, does not process insurance claims, and does not share insurance-related information outside the scope of platform matching and functionality.

6. What Professionals Share Publicly

The following professional profile information is publicly visible on ADHSpace: • Name • Professional roles (one or more, in ranked order) • Credentials and biography • Areas of support (primary and additional) and specialisations (primary and additional) • Therapy approach and style (primary and additional) • Languages spoken • Pricing and session information • Payment options (self-declared; e.g. pay per session, packages, retainers, payment plans) • Payment link URL (where the professional has chosen to display one publicly) • Availability status (active, fully booked) • Gender identity (where the professional has chosen to display this publicly) • Private health insurance acceptance status and named providers (where provided by the professional) • Profile photo • Intro video (if provided) • Location (where provided) • Professional website (where provided) Accreditation documents, phone numbers, and account credentials are never shown publicly. All professionals listed on ADHSpace have been reviewed before approval. Insurance information and payment option information displayed on professional profiles is provided directly by the professional. Professionals remain responsible for ensuring their profile information stays accurate and up to date.

7. Client Enquiries & Intro Call Requests

When a user contacts a professional through ADHSpace: • Their name, email address, optional phone number, and message are shared with the selected professional via email • Questionnaire context (ADHD situation, preferences, budget, etc.) may also be shared where relevant to the enquiry • Enquiry and intro call request data is stored in the ADHSpace platform for admin moderation and support purposes • Professionals respond directly and independently By submitting an enquiry or intro call request, you consent to your contact information being shared with the relevant professional.

8. Professional Dashboard & Client Data

Approved professionals may store client and session information within their ADHSpace dashboard, including client names, contact details, session dates, notes, meeting links, and session status. This data is stored to help professionals organise their work. It is not shared with other users. Session reminder emails, meeting link notifications, and optional payment link emails may be sent to clients on a professional's behalf when triggered by the professional via the dashboard. Where professionals have enabled the automatic pre-session reminder feature, reminder emails may also be sent automatically without requiring the professional to trigger them manually each time. Professionals are responsible for ensuring they have appropriate consent from their clients to receive such communications. Meeting links stored within session records may be shared with clients via email when the professional triggers a meeting link reminder. Payment links entered by professionals when using the optional payment link feature are transmitted to the relevant client solely for the purpose of that communication. ADHSpace does not store card details, bank details, or payment credentials. Payment transactions occur entirely outside of ADHSpace using third-party services selected by the professional. ADHSpace acts as a data processor in relation to client data stored by professionals in the dashboard. Professionals are the data controller for this data and are responsible for complying with applicable data protection law in relation to their clients.

9. Questionnaire Data & Matching

Responses submitted through the ADHSpace questionnaire are stored and used to generate match results. The matching process is algorithmic and informational — it is not a clinical assessment. Matching criteria considered include: the type of support sought, areas of difficulty, preferred professional roles, specialisation preferences, session format (online or in-person), budget, availability, language, urgency, age bracket, gender preference for the professional, and insurance preference. Professionals are presented to users based on how well their profile criteria align with the user's questionnaire responses. Professionals organise their areas, specialisations, and approaches into primary (highest relevance) and additional (broader experience) tiers, which also influences matching and how they are displayed in results. Any insurance preference submitted as part of the questionnaire is used to weight and rank matching results in favour of professionals who indicate they accept relevant insurance arrangements. It does not constitute a guarantee that insurance coverage will be available or accepted by any specific professional. Questionnaire data may be used in aggregated, anonymised form to improve the platform's matching logic and understand how users engage with the service. Raw questionnaire data, including the IDs of professionals shown as matches, is accessible to ADHSpace admins for moderation and service improvement purposes.

9a. AI Matching Assistant

ADHSpace offers an AI Matching Assistant as an alternative, conversational way to find a suitable professional, in addition to the standard questionnaire. When you send a message to the AI Matching Assistant: • Your message is processed to extract relevant information, such as the type of support you're looking for, preferred approach, gender/language/location preferences, and budget, which is used to recommend professionals • A log of the message, an anonymous session identifier, device type, and the outcome of the message (e.g. completed, follow-up needed, or safety flagged) is stored for admin review, quality control, and service improvement • If your message contains language suggesting a possible safety or crisis concern, the assistant will respond with crisis support resources and log the interaction as safety flagged for admin awareness. This automated detection is a safety measure only and is not a substitute for professional risk assessment — see Section 17 (Emergency Support) of our Terms & Conditions The AI Matching Assistant is algorithmic and informational only. It is not a substitute for professional advice, diagnosis, or emergency support. Conversation logs are accessible to ADHSpace administrators for the purposes of moderation, safety review, and improving the matching experience.

9b. Search & Interaction Analytics

To understand how visitors browse the platform, ADHSpace records interactions with homepage topic pills and directory filters, including which item was selected, the category, whether it was selected or deselected, and the number of results shown. An anonymous session identifier and device type are also recorded. This data is used solely to understand which topics, filters, and search patterns are most useful to visitors, and to improve the browsing and matching experience. It is accessible to ADHSpace administrators for these purposes only.

10. Accreditation Documents

Professional accreditation, certification, and supporting document uploads are: • Stored securely with access restricted to ADHSpace administrators • Used for the purposes of application review and professional vetting • Never displayed publicly on professional profiles Documents are retained for as long as the professional account remains active, and for a reasonable period thereafter for record-keeping purposes.

11. Reviews & Testimonials

ADHSpace may display reviews and testimonials on the platform. These are submitted to and moderated by ADHSpace before publication. Where reviews are published, the reviewer's name and review content may be publicly visible. Star ratings, where provided, may also be displayed. Reviews are moderated by ADHSpace administrators. Raw review data — including reviewer names, review text, and ratings — is accessible to ADHSpace admins for moderation purposes. If you have submitted a review and wish to request its removal or correction, contact hello@adhspace.com.

12. Admin Access

ADHSpace administrators may access submitted data — including professional profiles, applications, client enquiries, questionnaire responses, AI Matching Assistant conversation logs, search and filter interaction data, accreditation documents, session records, dashboard activity, problem reports, and reviews — for the purposes of moderation, verification, platform support, and service improvement. Admin access is restricted to authorised personnel only.

13. Third-Party Services & Data Processors

ADHSpace uses third-party services to operate the platform. These services may process personal data on our behalf: • Email delivery (Resend) — used to send all automated and triggered emails • Hosting and infrastructure providers — used to store and serve platform data • Authentication services — used for professional sign-in • AI / language model providers — used to power the AI Matching Assistant and process messages you send to it • Analytics tools — used to understand platform usage, including search and filter interactions ADHSpace may offer an optional Google Calendar integration feature. If enabled by a professional, calendar data will be processed via Google's services, subject to Google's own privacy policy and terms of service. Use of this feature is entirely optional and at the professional's discretion. Professionals may embed intro videos from platforms such as YouTube, Vimeo, Loom, or Google Drive. When videos are displayed, those providers may independently collect data in accordance with their own privacy policies. Professionals may share payment links, booking links, or external website links through the platform. These links may direct users to third-party websites and services outside ADHSpace. ADHSpace is not responsible for the privacy practices, content, or security of those third-party services. Users access external services at their own discretion. Where third-party processors are based outside the UK or EEA, data transfers are conducted in accordance with UK GDPR requirements, including use of appropriate safeguards where applicable.

14. Data Retention

We retain personal data for as long as necessary to fulfil the purposes for which it was collected, including legal, operational, and record-keeping obligations. As a general guide: • Enquiry and intro call request data: retained for up to 2 years • Questionnaire submissions: retained for up to 2 years • Professional application data: retained for the duration of the professional relationship and up to 3 years after account closure • AI Matching Assistant conversation logs and search/filter interaction data: retained for up to 2 years • Verification tokens: deleted immediately after use or expiry • Client and session data entered by professionals: retained until the professional account is closed, or as directed by the professional • Reviews and testimonials: retained while published on the platform; removed upon request where appropriate You may request deletion of your data at any time (see Section 17).

15. Email Communications

ADHSpace sends emails in the following circumstances: • Professional application approvals or rejections • Dashboard account setup and invitations • Client enquiry notifications to professionals • Intro call request notifications to professionals • Session reminder emails (triggered manually by professionals) • Automatic pre-session reminder emails (where the professional has enabled this feature for a session) • Meeting link reminder emails (triggered by professionals) • Payment link emails (triggered by professionals using the optional payment link feature) • Email verification codes for professional sign-in • Platform or policy update notices • Newsletters, announcements, and other broadcast updates sent by ADHSpace admins to professionals We do not send unsolicited marketing emails to clients or visitors. If we introduce a marketing communications service in the future, we will obtain appropriate consent.

16. Cookies & Analytics

ADHSpace may use cookies and analytics tools to understand how the platform is used and to improve the experience. Essential cookies are necessary for the platform to function. Analytics cookies are used to collect anonymised usage data. Where non-essential cookies are used, we will seek your consent where required. You can manage or disable cookies through your browser settings at any time. Disabling certain cookies may affect platform functionality.

17. Payments

ADHSpace does not process payments between users and professionals and is not a payment processor. ADHSpace does not take any commission from fees charged by professionals to clients. Professionals may use the optional payment link feature to send clients a link to a third-party payment service (such as Stripe, PayPal, Square, or an invoice platform) of their choosing, or to display a payment link on their public profile. When this feature is used: • The payment link URL is transmitted via email to the relevant client or displayed on the professional's public profile • ADHSpace does not store card details, bank details, or payment credentials • Payment transactions occur entirely outside of ADHSpace using the third-party service selected by the professional • ADHSpace has no visibility into, or responsibility for, any payment transaction Professionals may also display payment options on their public profile (e.g. pay per session, packages, retainers, payment plans). These are self-declared and ADHSpace does not verify or guarantee their availability. If and when subscription or payment functionality is introduced for professional memberships, additional privacy provisions will apply and will be communicated separately.

18. Your Rights

Under UK GDPR, you have the following rights in relation to your personal data: • Right of access — to request a copy of the data we hold about you • Right to rectification — to request correction of inaccurate data • Right to erasure — to request deletion of your data ("right to be forgotten") • Right to restrict processing — to ask us to limit how we use your data • Right to data portability — to receive your data in a portable format • Right to object — to object to processing based on legitimate interests • Right to withdraw consent — where processing is based on consent (including consent to display gender identity publicly) To exercise any of these rights, contact: hello@adhspace.com We will respond to requests within one calendar month. If your request is complex, we may extend this by up to two further months and will inform you accordingly. You also have the right to lodge a complaint with the Information Commissioner's Office (ICO): ico.org.uk

19. Children

ADHSpace is primarily intended for adults aged 18 and over. ADHSpace may be used by parents, carers, and adults who are seeking professional support in relation to a child with ADHD, or who are navigating parenting, family dynamics, or relationships where ADHD is relevant. In these cases, it is the adult using the platform whose personal data is collected — not the child's. ADHSpace does not directly provide matching services for children under 18 as end users and does not knowingly collect personal data directly from children under 18. Adults using ADHSpace in relation to a child's needs remain responsible for ensuring any professional engaged is appropriately qualified and experienced to support that child.

20. International Users

ADHSpace is operated from the United Kingdom. If you access the platform from outside the UK, your personal data may be transferred to and processed in the UK. By using the platform, you consent to this transfer. We take appropriate steps to ensure that personal data transferred internationally is protected in accordance with UK GDPR requirements.

21. Changes to this Policy

We may update this Privacy Policy from time to time. Updated versions will be posted on this page with a revised date. We will make reasonable efforts to notify users of material changes.

22. Contact & Complaints

If you have any questions about this Privacy Policy, how we process your personal data, or wish to exercise your data protection rights, please contact us: hello@adhspace.com You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) if you believe your data has been handled improperly. ICO website: https://ico.org.uk ICO helpline: 0303 123 1113