This is short, because we hold very little. The most important thing to know is in clause 2: everything you write inside the Navigator stays on your own device and never reaches us.
The Autism Mentors Ltd is the data controller for this website and for the Navigator. We are a company registered in England and Wales, company number 14962129, registered office 70 Moorlands Drive, Stainburn, Workington, Cumbria CA14 4UJ.
For anything about your personal information, write to info@theautismmentors.co.uk.
Everything you type into the Navigator stays in your own browser, on your own device. The sliders, the writing boxes, your compass readings, your toolkit, your diary, your crisis plan. None of it is sent to us. There are no accounts inside the programme, no tracking and no analytics.
We are not being modest about this: we could not show you your own writing if you asked us to, because we do not have it.
Three consequences worth understanding. We cannot recover your writing if you lose it. We cannot hand it to anyone who asks, including a school, an employer or a health service. And if you clear your browser data or move to a new device, it is gone.
If you buy a licence: your email address, your licence key, the date you bought it, and the reference of the payment. We keep this because your licence does not expire, and we need to be able to recognise your key and to send it to you again if you lose it.
We also record how many devices a licence has been used on, as a count with an anonymous identifier for each. This enforces the five device limit. It does not tell us what the devices are, where they are, or who is using them.
If you use the contact form: whatever you put in it, which reaches us as an email. Usually a name, an email address and a message.
If you visit the site: your IP address is used briefly to limit how many times an address can try a licence key or start a checkout in a minute. Those counters are deleted automatically after two minutes. We keep no analytics and set no advertising or tracking cookies.
Payment details never reach us. Stripe takes your card details directly. We never see or store them.
We use two, and only after you unlock the programme with a licence key.
Both are strictly necessary to give you what you have paid for, so we do not ask for consent to them. Neither is used for advertising or tracking, and neither is shared with anyone.
The site also remembers whether you chose the light or dark theme. That is stored in your browser, not in a cookie, and never sent anywhere.
Four companies process information on our behalf, each doing one job:
We do not sell your information, share it for advertising, or pass it to anyone else.
For your licence record and licence email: because we need it to give you what you bought. In data protection terms, performance of a contract.
For the rate limiting and the device count: our legitimate interest in stopping licence keys being guessed or shared beyond what was paid for.
For contact form messages: our legitimate interest in answering you.
We do not send marketing email, so we do not ask for consent to any.
Licence records: indefinitely. Your licence is permanent, so the record of it has to be too. If we deleted it your key would stop working.
Contact form messages: kept in our email while they are useful, and deleted when they are not.
Rate limiting counters: two minutes.
We keep a daily backup of licence records so that a technical failure does not cost anyone the access they paid for.
You can ask us to show you what we hold about you, correct it, delete it, or stop using it. You can also ask for a copy in a portable form, and object to our use of legitimate interests. Write to info@theautismmentors.co.uk and we will reply within five working days, and act within one month.
One honest limit. If you ask us to delete your licence record, we will, and your licence key will stop working. We cannot delete the record and keep your access, because the record is the access. We will say so before doing anything.
If you are unhappy with how we have handled your information, you can complain to the Information Commissioner's Office at ico.org.uk/make-a-complaint or on 0303 123 1113. We would rather you told us first, but you do not have to.
The 11 plus edition is written for young people aged eleven and over, and must be bought by an adult. We hold the buying adult's email address, not the young person's.
What the young person writes stays on their device, and is not visible to the adult who bought the licence, to their school, or to us. That is deliberate, and it is the same promise we make to everyone.
Licence records are stored on Cloudflare's network, which is global, so they may be held or processed outside the United Kingdom. Stripe and Resend also operate internationally. Each of them provides safeguards for international transfers of the kind UK data protection law requires.
If we change how we handle information, we will update this page and change the version and date at the top. If a change is significant and we hold your email address, we will tell you.