GDPR & Essential Cookies Statement
How the ADHD Clinical Supervision & Training Academy handles your personal data and the essential cookies that keep the platform working.
This statement explains, in plain language, what personal data the Academy collects, why we collect it, the essential cookies our website relies on, and the rights you have under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
1. Who we are
The ADHD Clinical Supervision & Training Academy (“the Academy”, “we”) is a CPD-accredited professional education platform for clinicians. We are the data controller for the personal information you provide when you register, enrol in training, or contact us.
2. Personal data we process
- —Account & identity: name, email address, professional role, subscription tier.
- —Learning data: module enrolment, progress, completed hours, certificates issued.
- —Enquiries & feedback: questions submitted to faculty, feedback forms, ratings.
- —Technical: authenticated session identifiers required to keep you logged in securely.
We do not use advertising, profiling or third-party marketing cookies.
3. Essential cookies
Our site only sets cookies that are strictly necessary for the service to function. These are exempt from consent requirements under paragraph 5 of the Privacy and Electronic Communications Regulations (PECR) because the service cannot operate without them.
| Cookie | Purpose | Duration |
|---|---|---|
| Session token | Keeps you logged in and secures your authenticated session. | Session / up to 30 days |
| CSRF token | Protects forms (enquiries, feedback, uploads) from cross-site request forgery. | Session |
| Preference cookie | Remembers display preferences (e.g. interface choices) for your next visit. | Up to 12 months |
Because these cookies are essential, we do not ask for consent before setting them. Blocking or deleting them will prevent you from logging in, submitting forms, or tracking your training progress.
4. Legal basis for processing
- —Contract — to deliver the training services you signed up for (Article 6(1)(b)).
- —Legal obligation — to maintain records where required (Article 6(1)(c)).
- —Legitimate interests — secure operation and improvement of the platform (Article 6(1)(f)).
5. How long we keep your data
Account and learning data is retained for as long as your membership is active and thereafter only as long as needed to maintain your CPD record, or as required by law. You can request deletion at any time (see your rights below).
6. Sharing your data
We only share personal data with the trusted hosting and authentication providers that operate the platform on our behalf, under written contracts that require them to keep it secure and process it only on our instructions. We never sell your data.
7. Your rights under UK GDPR
- —Be informed about how we use your data.
- —Access, correct or update your personal data.
- —Request erasure (“the right to be forgotten”).
- —Restrict or object to processing.
- —Data portability and the right to withdraw consent where it was the basis.
To exercise any of these rights, contact us using the details below.
8. Contact & complaints
For privacy questions or to make a request, email hello@adhdacademy.example. If you are not satisfied with our response, you have the right to complain to the Information Commissioner’s Office (ICO) at ico.org.uk.
This statement was last reviewed on 2 July 2026. We may update it from time to time; the current version will always appear here.