Privacy · Policy.
Last updated: August 2026 · UK GDPR & Companies Act Compliant
1. Overview
This policy outlines how neurodivers³ ("we", "our", "us") handles personal data in connection with our website, digital products, and services. Under the UK General Data Protection Regulation (UK GDPR) and Data Protection Act 2018, we act as the data controller for the information you share with us.
As an autistic & ADHD-led project, we value transparency, simplicity, and zero behavioural surveillance. We collect only what is strictly necessary to run this platform, deliver your requested resources, and communicate directly with you.
2. What Data We Collect & Why
We only collect data under legitimate business interests, performance of a contract, or explicit consent:
- Newsletter Subscriptions: When you subscribe to our newsletter or memoir updates, your email address and subscription timestamp are stored securely in our private, self-hosted PostgreSQL database on our server. Welcome emails and updates are dispatched via Resend. You can unsubscribe at any time with a single click.
- Contact Form Enquiries: When you send a message via our on-page contact form, your name, email, selected topic, and message content are transmitted via Resend directly to Ollie's inbox ([email protected]) solely for replying to your enquiry.
- Transaction & Billing Data: Collected when you purchase digital products from our store. We do not see or store your raw payment card details. Checkout, tax compliance, receipts, and digital file delivery are securely handled by Polar (our merchant of record) and its payment processors.
- Technical, Cookie & Storage Data: We do not set any tracking cookies or behavioural advertising cookies. We only use browser storage (localStorage and IndexedDB) for necessary, functional preferences:
Key / Storage Type / Classification Purpose nd3_theme_preference Local Storage (Functional) Remembers your preferred reading theme (Void, Paper). nd3-a11y-* Local Storage (Functional) Accessibility overrides (font scale, dyslexic spacing, ruler, motion, contrast). nd3_telemetry_acknowledged Local Storage (Functional) Remembers whether you have acknowledged the privacy banner. nd3_consent_analytics Local Storage (Functional) Saves your choice to opt-in or opt-out of anonymous page view statistics. nd3_secured_downloads Local Storage (Functional) Stores secure links for your digital product purchases. nd3-lab-data (IndexedDB) IndexedDB (Functional) Stores user state, settings, and audio settings for lab tools (e.g., Acoustic Shield). nd3-spoon-tracker-* Local Storage (Functional) Remembers spoons and daily tasks for the Spoon Tracker lab tool. nd3-audit-* Local Storage (Functional) Remembers recent ratings for the Sensory Audit lab tool. nd3-visual-* Local Storage (Functional) Remembers custom filter parameters for the Visual Snow lab tool.
3. Data Infrastructure & Processors
We never sell, rent, or trade your personal data. We only process data on our secure, self-hosted infrastructure and with verified service providers:
- Self-Hosted Server Infrastructure: Our website, Payload CMS, and internal PostgreSQL database are hosted on our dedicated, private server running Coolify within modern European data centres (Netcup, Germany), fully adhering to UK & EU GDPR data protection mandates.
- Resend: Secure transactional email infrastructure for dispatching subscriber notifications and contact form submissions.
- Polar: PCI-compliant merchant of record handling payment processing, VAT compliance, and encrypted digital file delivery.
- Cloudflare: DNS routing and DDoS mitigation.
4. Your Rights Under UK GDPR
You hold full legal rights over your information, including:
- The right to be informed about how your data is used.
- The right to access the personal data we hold about you.
- The right to request rectification of inaccurate data.
- The right to erasure ("right to be forgotten") - we will delete your record in full upon request.
- The right to withdraw consent at any time (e.g., unsubscribing from emails).
To exercise any of these rights, contact us at [email protected].
Summary Checklist
- ✓Zero behavioural ad cookies or cross-site tracking
- ✓SSL encryption throughout
- ✓Polar checkout security for payments
- ✓UK GDPR Compliant
Queries & Subject Access Requests
If you have questions about how your personal details are processed, or would like to request a copy of your files, email the founder directly.
Contact Data Protection