How All Minds Matter collects, uses, and protects your personal data
Plain language summary: All Minds Matter is a neuroinclusion platform for workplaces and a learning platform for students. We collect what we need to run your account and provide the service. Because our platform involves neurodivergence-related data, we treat this with the highest level of care. You can access, correct, or delete your data at any time by contacting us.
All Minds Matter is a trading brand of Neuroinclusive Advisory Ltd, Company No. 17185120, registered in England and Wales. We are the data controller for personal data collected through our website at niadvisory.co.uk and our platforms.
We operate two products: the All Minds Matter platform (a neuroinclusion assessment and e-learning service for organisations) and Mindforge (a gamified study platform for GCSE and A-Level students). This notice covers both.
For questions about this notice or how we handle your data, contact us at hello@niadvisory.co.uk.
We collect the following categories of personal data:
Important: Information about neurodivergent conditions may constitute special category data under GDPR Article 9. We take extra care with this data and will always ask for your explicit consent before processing it.
The All Minds Matter platform is designed to help organisations audit their neuroinclusion practices. Assessment questions relate to organisational policies, processes, and environments — not to individual employees' medical or diagnostic information.
If you choose to share information about your own neurodivergent identity, we treat this as special category data under GDPR Article 9. We will only process this data with your explicit consent, and you can withdraw that consent at any time.
We will never ask for, require, or store diagnostic information about individual users or employees as part of the standard platform experience.
We use your personal data for the following purposes:
| Purpose | Description |
|---|---|
| Providing the platform | Running your account, storing assessment or study progress, and generating results and action plans. |
| Multi-user functionality | Enabling you to invite colleagues and share organisational scores within your team. |
| AI-powered features | Sending inputs to the Anthropic API to generate action plans, study tools, and content. Inputs are not used to train models. |
| Transactional emails | Sending invitation emails, account notifications, and support responses. |
| Security and fraud prevention | Logging access and detecting unusual or unauthorised activity. |
| Platform improvement | Understanding how features are used to improve our products over time. |
| Subscription management | Processing payments via Stripe and managing subscription status. |
| Legal compliance | Meeting our obligations under UK GDPR and other applicable law. |
We do not use your data for advertising and we do not sell your data to any third parties.
Under UK GDPR, we rely on the following legal bases:
| Legal basis | When we rely on it | Article |
|---|---|---|
| Contract | Processing necessary to provide the platform you have signed up for. | Art. 6(1)(b) |
| Legitimate interests | Security monitoring, fraud prevention, and platform improvement. | Art. 6(1)(f) |
| Legal obligation | Where we are required to process or retain data by law. | Art. 6(1)(c) |
| Explicit consent | For any special category data relating to neurodivergent identity. | Art. 9(2)(a) |
Where we rely on consent, you have the right to withdraw it at any time without affecting the lawfulness of processing carried out before withdrawal.
We share data with the following third-party services as necessary to operate our platforms:
| Provider | Purpose | Data shared |
|---|---|---|
| Supabase | Database and authentication | Account data, assessment responses, scores, and study progress |
| Anthropic | AI-powered features across both platforms | Assessment inputs and study tool inputs — not used to train models, no retention |
| Stripe | Payment processing and subscription management | Billing name, email, and payment details — we do not store card numbers |
| Resend | Transactional email delivery | Email address for invitation and notification emails |
| Vercel | Platform hosting and deployment | Technical usage data passing through hosting infrastructure |
All third-party providers are selected for strong security practices and compliance with applicable data protection law. We do not share your data with any other third parties without your consent, except where required by law.
We take the security of your data seriously. Given the sensitive nature of neuroinclusion data, we apply the following protections as standard.
If you believe your account has been compromised or you have identified a security vulnerability, please contact us immediately at hello@niadvisory.co.uk.
| Data type | Retention period |
|---|---|
| Account and identity data | Duration of account plus 30 days after deletion |
| Assessment responses and scores | Duration of account |
| AI-generated action plans | Duration of account |
| Mindforge study progress and achievements | Duration of account |
| AI tool inputs (both platforms) | Not retained — deleted after processing completes |
| Policy documents uploaded for review | Not retained — deleted after AI processing completes |
| Email logs | Up to 90 days for delivery and security purposes |
| Security and access logs | Up to 12 months |
| Billing records | As required by law (typically 7 years) |
When you delete your account, we will permanently delete your personal data within 30 days, except where we are required by law to retain it for longer.
Under UK GDPR, you have the following rights in relation to your personal data:
To exercise any of these rights, contact us at hello@niadvisory.co.uk. We will respond within 30 days.
We use the following cookies on our platforms:
| Cookie type | Purpose | Essential? |
|---|---|---|
| Authentication cookies | Keep you logged in between page loads. | Yes — cannot be disabled without breaking the service |
| Session cookies | Temporary cookies that expire when you close your browser. | Yes — required for platform functionality |
We do not currently use advertising or tracking cookies. If we introduce analytics or marketing cookies in the future, we will update this notice and seek your consent before setting them.
The All Minds Matter workplace platform is intended for use by organisations and their employees and is not directed at children under 16.
Mindforge is designed for GCSE and A-Level students aged 14 and above. Where a user is under 16, we rely on consent from a parent or guardian for any data processing beyond what is strictly necessary to provide the service. We do not collect more data from younger users than is necessary, and we do not use their data for any purpose beyond delivering the platform.
If you believe a child has provided us with personal data inappropriately, please contact us at hello@niadvisory.co.uk and we will delete it promptly.
We may update this Privacy Notice from time to time. When we make significant changes, we will notify you by email and update the "Last updated" date at the top of this page.
Continued use of our platforms after changes take effect constitutes your acceptance of the updated notice.
If you have questions about this Privacy Notice, wish to exercise your data rights, or want to raise a concern about how we handle your data: