Privacy Policy

Last updated: 10 August 2026

This Privacy Policy explains how KDY & Surrounds ND Group (“we”, “us”, “our”) collects, uses, stores and protects personal information when you visit or use www.neurdiversitykdy.com (the “Website”), contact us, attend our events, or otherwise interact with our group.

We respect your privacy and are committed to protecting your personal data in accordance with the General Data Protection Regulation (GDPR) and applicable Irish data protection law, including the Data Protection Act 2018.

1. Who We Are

The data controller responsible for personal data processed through this Website is:

KDY & Surrounds ND Group
[Postal Address]
Kildorrery, Co. Cork, Ireland

Email: [insert privacy/contact email]

If you have any questions about this Privacy Policy or how we handle your personal data, please contact us using the details above.

2. What Personal Information We May Collect

Depending on how you interact with us, we may collect some or all of the following information:

Your name
Email address
Telephone number
Information you provide when contacting us
Information provided when registering for or attending an event
Information provided through forms on our Website
Photographs or video recordings taken at group events, where applicable
Information contained in messages, enquiries or correspondence you send to us
Technical information about your visit to our Website, such as IP address, browser type and device information
Cookie and website usage information, where cookies or similar technologies are used

We only collect information that is reasonably necessary for the purposes described in this Privacy Policy.

3. How We Collect Your Information

We may collect personal information when you:

Contact us by email, telephone or through our Website
Complete an online contact or registration form
Register for or attend one of our events
Subscribe to receive information from us
Interact with our Website
Communicate with us through social media or other online platforms

We may also receive information from a parent, guardian or another person where they provide information on behalf of someone else.

4. How We Use Your Personal Information

We may use personal information to:

Respond to enquiries and requests
Provide information about our group and activities
Organise and administer events and activities
Communicate with members, parents, guardians and supporters
Maintain appropriate records of events and activities
Improve our Website and services
Keep our Website secure
Meet legal or regulatory obligations
Protect the safety and welfare of participants at our activities
Send information that you have requested or agreed to receive

We will not use your personal information for purposes that are incompatible with the purpose for which it was collected unless permitted or required by law.

5. Our Legal Basis for Processing Personal Data

Under the GDPR, we must have a lawful basis for processing personal information.

Depending on the circumstances, we may rely on one or more of the following:

Consent

Where appropriate, we may ask for your consent before collecting or using certain personal information. You can withdraw your consent at any time.

Legitimate Interests

We may process information where it is necessary for our legitimate interests, provided those interests are not overridden by your rights and freedoms.

For example, this may include managing our activities, responding to enquiries, maintaining the Website and communicating with people who engage with our group.

Legal Obligation

We may process information where this is necessary for us to comply with a legal obligation.

Contract or Requested Services

Where applicable, we may process information where it is necessary to provide a service or take steps at your request before entering into an arrangement with you.

6. Special Category Information

Some types of personal information receive additional protection under the GDPR. This includes certain information concerning health and other special categories of personal data.

Because our group supports neurodivergent people and families, individuals may voluntarily provide information about themselves or their children that could constitute special category personal data.

We will only collect or process such information where there is an appropriate lawful basis under data protection law and where it is necessary for the particular purpose.

You should not provide sensitive personal information through a general Website contact form unless it is specifically requested or necessary.

7. Children and Young People

Our activities may involve children and young people.

Where we collect personal information relating to a child or young person, we will take appropriate steps to protect that information and, where appropriate, obtain consent or information from a parent or legal guardian.

We will only collect information that is reasonably necessary for the relevant activity or purpose.

8. Photographs and Video

Photographs and video may occasionally be taken at our events and activities.

Where photographs or video are intended to be used publicly, such as on our Website, social media pages, promotional material or newsletters, we will take appropriate steps to ensure that the relevant permissions and legal bases are in place.

Where appropriate, we may ask individuals or parents/guardians for consent before using identifiable photographs or video.

If you have concerns about a photograph or video in which you or your child appears, please contact us using the details provided above.

9. Sharing Your Personal Information

We will not sell, rent or trade your personal information.

We may share personal information with third parties where this is necessary and lawful, including:

Website hosting and technical service providers
Email or communication service providers
Event or registration platforms
IT and security service providers
Professional advisers where necessary
Government authorities or regulatory bodies where legally required
Emergency services or other appropriate organisations where necessary to protect someone’s safety

Where third parties process personal information on our behalf, we will take reasonable steps to ensure that appropriate data protection and security arrangements are in place.

10. Social Media

We may operate social media accounts or include links to social media platforms on our Website.

If you interact with us through a social media platform, that platform may process your personal information according to its own privacy policy.

We are not responsible for the privacy practices of third-party social media platforms.

11. Cookies

Our Website may use cookies and similar technologies.

Cookies are small files stored on your device that can help a website operate correctly, remember preferences and understand how visitors use the Website.

We may use:

Essential cookies required for the Website to function
Preference cookies, where applicable
Analytics cookies, where applicable
Third-party cookies, where applicable

Where required by law, we will ask for your consent before using non-essential cookies.

You can control or disable cookies through your browser settings. Disabling certain cookies may affect the functionality of the Website.

If our Website uses third-party analytics, advertising or embedded services, their own privacy policies may also apply.

12. Website Security

We take reasonable technical and organisational measures to protect personal information against:

Unauthorised access
Accidental loss
Destruction
Alteration
Unauthorised disclosure

However, no method of transmitting or storing information online can be guaranteed to be completely secure.

13. How Long We Keep Your Information

We will only keep personal information for as long as reasonably necessary for the purpose for which it was collected, unless we are legally required to retain it for longer.

The appropriate retention period may depend on:

The nature of the information
Why it was collected
Whether there is an ongoing relationship with you
Legal or regulatory requirements
Whether the information is required to deal with a complaint or potential legal issue

When information is no longer required, we will take reasonable steps to securely delete or anonymise it.

14. Your Data Protection Rights

Under the GDPR, you may have the following rights in relation to your personal information:

Right to access – you can ask for a copy of personal information we hold about you.
Right to rectification – you can ask us to correct inaccurate or incomplete information.
Right to erasure – in certain circumstances, you can ask us to delete your personal information.
Right to restrict processing – in certain circumstances, you can ask us to limit how we use your information.
Right to object – in certain circumstances, you can object to our processing of your personal information.
Right to data portability – in certain circumstances, you may request your information in a structured, commonly used and machine-readable format.
Right to withdraw consent – where we rely on consent, you can withdraw that consent at any time.

These rights are subject to certain legal conditions and exceptions.

The Irish Data Protection Commission confirms that individuals have rights including access, rectification, erasure, restriction, portability and objection under the GDPR.

15. How to Exercise Your Rights

If you wish to exercise any of your data protection rights, please contact us:

Email: [insert privacy/contact email]

Please provide enough information for us to identify you and understand your request.

We may need to ask for additional information to verify your identity before releasing personal information.

We will normally respond to a valid request within the timeframe required by data protection law.

16. Complaints

If you have concerns about how we have handled your personal information, we would encourage you to contact us first so that we can try to resolve the matter.

You also have the right to make a complaint to the Irish supervisory authority:

Data Protection Commission
6 Pembroke Row
Dublin 2
D02 X963
Ireland

Website: https://www.dataprotection.ie/

The Data Protection Commission is the Irish supervisory authority for the GDPR.

17. International Transfers

Some third-party services we use may process information outside Ireland or the European Economic Area (EEA).

Where personal information is transferred outside the EEA, we will take appropriate steps to ensure that the transfer is carried out in accordance with applicable data protection law.

Where relevant, this may include relying on an adequacy decision or appropriate safeguards such as Standard Contractual Clauses.

18. Automated Decision-Making

We do not currently use your personal information for automated decision-making or profiling that produces legal or similarly significant effects on you.

If this changes, we will update this Privacy Policy and provide any information required by applicable data protection law.

19. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our activities, the Website, technology or applicable data protection legislation.

The date at the top of this Privacy Policy indicates when it was last updated.

We recommend checking this page periodically for any changes.

20. Contact Us

If you have any questions about this Privacy Policy or how we handle your personal information, please contact:

KDY & Surrounds ND Group
Kildorrery, Co. Cork, Ireland

Email: [insert email address]

Website: www.neurdiversitykdy.com

Privacy Policy last updated: 10 August 2026