Privacy Policy

NeurodiversityHK is the data user (controller) for personal data collected through the Platform. You can contact us at neurodiversityhkorg@gmail.com for any privacy-related questions or requests.

Account information: your name, email address, password (stored in hashed form by our authentication provider), and optional phone number.

Participant profile information: for each participant you register, we collect their name, age or date of birth, support categories or needs, and any notes you choose to provide to help our program leads support them safely.

Program activity: enrolments, attendance, and communications you send us related to programs.

Technical data: device information, IP address, and basic usage logs that we use for security and to improve the Platform.

Your personal data is strictly private. We do not sell your data and we do not share it with third parties for their own marketing.

The Platform securely stores and displays the information necessary for core functionality — specifically, the creation and management of participant profiles. This means the participant profiles you create are visible to you when you sign in, and to the NeurodiversityHK team members who need them to run the programs your participant is enrolled in. Participant profile data is not shown to other families or made publicly viewable.

All access is protected by authentication, and database-level access controls ensure that families can only see their own profiles and enrolments.

To create and manage your account and participant profiles.

To operate programs: confirm enrolments, manage capacity, and communicate about sessions.

To keep the Platform safe: detect abuse, prevent unauthorized access, and investigate security incidents.

To improve the Platform based on aggregated, non-identifying usage patterns.

To comply with legal obligations.

We collect personal data lawfully and for purposes directly related to our activities. We only collect what is necessary, keep it accurate, and hold it no longer than needed. We take practical steps to protect against unauthorized access, processing, erasure, or loss.

We use industry-standard practices including encrypted connections (HTTPS/TLS), managed authentication with hashed passwords, role-based access controls, row-level database security so families can only access their own records, and monitoring for suspicious activity.

Automated scraping, unauthorized access attempts, and other cyber-security threats are actively defended against. Any attempt to bypass these protections is a violation of our Terms of Service and may be reported to the relevant authorities.

We keep your account and participant profile data for as long as your account is active. If you close your account, we will delete or anonymise your personal data within a reasonable period, except where we are required to retain records for legal, safeguarding, or program-integrity reasons.

Under the PDPO you have the right to: request access to the personal data we hold about you or your participant; request correction of inaccurate data; withdraw your consent and close your account; and ask us questions about how your data is handled.

To exercise any of these rights, email neurodiversityhkorg@gmail.com. We will respond within a reasonable time and in line with our PDPO obligations.

Because the Platform is used by parents and guardians registering participants for programs, we handle participants' data with particular care. Only the minimum information needed to run programs safely is collected, and it is accessible only to the participant's parent/guardian and the NeurodiversityHK team members responsible for that program.

We use a small number of essential cookies to keep you signed in and to remember basic preferences such as language. We may use privacy-respecting analytics to understand aggregate usage. We do not use tracking cookies for third-party advertising.

We may update this Privacy Policy from time to time. If changes are material, we will notify you through the Platform or by email.

Privacy questions or requests? Email neurodiversityhkorg@gmail.com.