Privacy Policy

ADHD Tribe ("we", "us", "our") is committed to protecting your privacy. This policy explains what personal data we collect through adhdtribe.co.uk, how we use it, and your rights under the UK GDPR and the Data Protection Act 2018.

1. Who we are

Data controller: ADHD Tribe. Contact us through our contact form.

2. What we collect

• Contact form data: name, email, optional phone number, and the message you send us.
• Member account data: your email address, the name you give us, and your account sign-in records, held so you can access your portal and Classroom.
• Purchase data: which product you bought, the amount, currency, payment status and payment references. Card details are handled entirely by Stripe — we never see or store them.
• Analytics data (with your consent): anonymised usage data via Google Analytics 4 with IP anonymisation.
• Technical data: essential cookies and log data required to serve the site.

3. Lawful basis

• Consent — analytics cookies and any marketing communications.
• Legitimate interests — replying to your enquiry.
• Contract — where you go on to book a coaching session.
• Contract — creating your member account, taking payment, and providing coaching sessions and Classroom access.
• Legal obligation — retaining purchase and tax records.

4. How long we keep it

Contact form submissions are kept for up to 24 months, then deleted, unless you become a client (in which case they're retained for our accounting records for 6 years as required by HMRC). Member accounts are kept while your account is open; purchase and refund records are retained for 6 years for HMRC accounting purposes even after an account is closed.

5. Sharing

We do not sell your data. We share data only with our essential processors: Supabase (EU-hosted database and authentication), Stripe (payment processing — Stripe acts as an independent controller for payment and fraud-prevention purposes), Google Analytics (analytics, with your consent), and our email provider. Each has appropriate safeguards in place. We never send email addresses, account identifiers or payment references to analytics.

6. Your rights

You have the right to access, correct, delete, restrict, or port your data, and to object to processing. Contact us through our contact form. You can also complain to the ICO at ico.org.uk.

7. Children

Our services are for adults (18+). We do not knowingly collect data from children.

8. Changes

We may update this policy. Material changes will be highlighted on this page.