Privacy

Who we are

NeuroAffirm Recruitment helps neurodivergent people find work, and helps employers hire them well. NeuroAffirm Recruitment Ltd, Cams Hall, Fareham, Hampshire PO16 8AB. Registered in England and Wales, company number 17468463. Registered office: Lake House, 2 Port Way, Port Solent, Portsmouth, Hampshire PO6 4TY.

NeuroAffirm Recruitment Ltd decides how your information is used, so in data protection law it is the "controller". We are registered with the Information Commission (ICO) under number ZC273673.

If you have a question about your information, email hello@neuroaffirmrecruitment.com or write to us at the address above. Our Managing Director looks after data protection for us.

The short version

We only ask for what we need to help you.
We keep your details in our team's email inbox and our files, in Microsoft 365. Everything you send on a form comes to our team's email inbox, including what you write in the free-text box. We email you a copy of what you sent us, without anything you wrote in the free-text box.
We never sell your information, and we never add you to a mailing list.
You decide what an employer is told about you.
You can ask to see, correct or delete your information at any time.

What we collect

If you register as a candidate

Your name and email address.
Your phone number, if you give it.
Anything you choose to tell us about what would help us talk to you.
Your consent: the wording you agreed to, and when you sent the form. We also note the date and that you came to us through our website.

You never have to tell us about your health, a diagnosis or being neurodivergent. If you do, see "Health and neurodivergence" below.

If you contact us as an employer

Your name, organisation and email address.
Your phone number, if you give it.
Your message.
Your consent, as above.

If you email or phone us

We keep your email in our inbox for two years, so we can help you. We record our phone calls, and keep the recording, any message you leave us and a note of the call in our files. We share our phone number with the other NeuroAffirm companies. When you call, you are put through to the company you need, and only that company keeps the recording.

When you visit the site

Site logs. Our hosting provider, Vercel, keeps standard technical records of each request, such as your IP address, browser and the page you asked for. We use them to run and protect the site.
Counting visits, only if you say yes. As Vercel describes it (checked 8 October 2026), Web Analytics records the page you viewed, the site you came from, your country, and your device and browser type. It uses no cookies and does not identify you. If you say no, it does not run at all.
Error reports. If something on a page breaks, our error-monitoring service, Sentry, receives a report: the page address (without anything after a "?"), your browser type and technical details of the fault. It is set up so that it does not keep your IP address, cookies, anything you type, or who you are.
Page speed. Vercel Speed Insights measures how quickly each page loads and responds for you. As Vercel describes it (checked 13 October 2026), it records the page address (without anything after a "?"), your country, your type of device, its operating system, your browser and connection speed, how quickly the page loaded and responded when you used it, which part of the page was slowest, and when Vercel received it. It is not tied to you or your IP address. It uses no cookies and stores nothing on your device. It runs unless you say no to counting visits, and stops straight away if you do.
Send limits. To stop anyone flooding our forms, we keep a scrambled version of your IP address, which cannot be turned back into it, for about 10 minutes. No more than 5 forms can be sent in that time.
Bot checks on our forms. Cloudflare Turnstile checks that a form is being sent by a person, not a program. To do this Cloudflare receives technical information about your browser and your IP address.

Do you have to give us your details?

No. You do not have to give us any information. To reply, we need your name and your email address, and on our form your tick in the consent box. Without a way to contact you, we cannot help. Your phone number and anything else you tell us are up to you.

Health and neurodivergence

Anything you tell us about your health, a condition, a diagnosis or the adjustments you need is "special category" information. The law asks us to protect it more carefully.

We only hold it because you chose to share it. If you use our form, ticking the box gives us your explicit consent. If you tell us by email or on a call, it is kept in our inbox or in the recording of the call, and we will ask for your consent in writing before we use it. If you do not give it, or you ask us to delete it at any time, we will delete it, including the recording.

We only use it to help you: to find roles that suit you and to arrange adjustments. We never pass it to an employer without asking you first, and you decide the words we use.

How we use your information, and why we are allowed to

Helping you find work. We use your details to understand what you are looking for, contact you, and arrange interviews and adjustments. Our legal basis is your consent, and your explicit consent for anything about your health.
Introducing you to an employer. We only share what you have agreed to, each time. Our legal basis is your consent.
Replying to employers and providing our services. Our legal basis is our legitimate interest in replying to you and working with your organisation.
Recording our calls. We record our phone calls, and keep any message you leave us, so we have an accurate record of what was said. Our legal basis is our legitimate interest in keeping an accurate record.
Sending you a copy of what you sent us. This uses the same basis as the form you filled in.
Keeping records the law requires, such as the records recruitment agencies must keep and our replies to requests about your information. Our legal basis is our legal obligation.
Running and protecting the site. We use site logs, send limits, bot checks, error reports and page speed measurements. Our legal basis is our legitimate interest in a website that works well and is secure.
Counting visits. Our legal basis is your consent. You can change your answer at any time on our cookies page.

We never make decisions that affect you, such as whether to put you forward for a role, by computer alone. Our spam checks can stop a form being sent automatically. If that happens, or you hear nothing from us within two working days, please email or call us.

Who we share it with

We never sell your information. We share it only:

with an employer, when you have agreed we can introduce you, and only what you have agreed;
with the companies that run our systems for us (listed below), who may use it only to provide their service to us, except where we say otherwise;
when the law requires us to.

The companies that run our systems:

Vercel hosts the website and its images, measures how quickly pages load and, if you agree, counts visits. The code that handles your form runs in London; pages are delivered from the Vercel server nearest to you. Vercel is a US company.
Upstash carries your form safely from the website to us, and runs our send limits. Your form is encrypted before it reaches Upstash. The key that unlocks it is deleted once your form arrives, or after 8 days at most. Upstash holds the form in Germany and the key in the UK.
Sentry tells us when a page breaks. It stores reports in the EU (Germany).
Cloudflare runs the bot check on our forms and our domain names.
Microsoft 365 runs our email and our files, where we keep our candidate and employer records, and stores them in the UK. It sends you the email copy of your form, without anything you wrote in the free-text box. It also delivers the whole form, including what you wrote in the free-text box, to our team's inbox. Any email you send us arrives there too. Our phone calls run on Microsoft Teams, part of Microsoft 365. We record them, and Microsoft 365 keeps the recordings, and any message you leave us, in the UK.
Meta runs WhatsApp, if you message us there. We use the WhatsApp Business app, and WhatsApp also uses what it receives under its own privacy policy. Our WhatsApp messages disappear after 90 days, and we add what you tell us to our records.
Neon stores the website's own content, in London. It holds no information about candidates or employers.

If we hear about you from someone else

An employer may tell us about someone in their team when asking for help. We only use what they tell us to help with what they asked, and we will tell that person when we first contact them. We will not discuss them further without their knowledge.

If your information leaves the UK

Sentry and Upstash store data in Germany, which UK law treats as giving adequate protection. Vercel, Cloudflare, Sentry, Upstash and Microsoft are based in the United States. For them we rely on the UK Extension to the EU-US Data Privacy Framework: each is certified under it (checked 30 October 2026). WhatsApp is run by WhatsApp LLC, also in the United States. WhatsApp LLC is not certified, so for WhatsApp we rely on standard contractual clauses with the UK Addendum. Ask us for a copy of these safeguards at hello@neuroaffirmrecruitment.com.

How long we keep it

Your record with us: two years after we were last in touch, unless you ask us to delete it sooner. After that, we delete it.
If we place you, or work with your organisation: the record of the placement and our invoices, for six years, because tax law requires it.
Your form on its way to us: a locked copy may stay in our delivery service's logs for up to 14 days. The key that unlocks it is deleted as soon as your form arrives, or after 8 days if delivery keeps failing. After that, nobody can read it.
Your form in our team's inbox: we keep it for the same time as emails you send us. Microsoft 365 Backup keeps copies of our inbox for up to 1 year, in the UK.
The email copy we send you: we do not keep a copy of it.
Emails you send us: two years from when you sent them. Recordings and notes of calls, and messages you leave us, are kept as part of your record with us.
WhatsApp messages: 90 days.
The scrambled IP address for send limits: about 10 minutes.
Site logs, error reports, bot checks and page speed measurements: as Vercel and Sentry describe it (checked 30 October 2026), Vercel keeps site logs for 1 day and Sentry keeps error reports for 30 days. Page speed measurements are not tied to you. Cloudflare does not say how long it keeps what it receives for bot checks.
Visit counts: as Vercel describes it, visits are counted without a cookie, and the code that tells one visit from another is discarded after 24 hours. Vercel keeps the counts for 12 months, and may keep them longer.

On your own device

When you fill in one of our forms, your browser saves what you type on your own device, so you can close the tab and come back later. It is not sent to us until you press send.

It is deleted once your form has been sent. If you do not send it, we stop using it after 7 days and delete it the next time you open the form; until then it stays in this browser. It includes anything you wrote about yourself, so on a shared or work computer, clear your browser's data for this site when you finish.

Our cookies page lists the small files the site stores and lets you change your answer about counting visits.

Your rights

You can ask us to:

give you a copy of the information we hold about you;
correct anything that is wrong;
delete your information, apart from anything the law says we must keep for a while;
limit how we use it;
give you your information in a format you can take elsewhere.

You can object to us using your information where we rely on our legitimate interests (see "How we use your information"). We will stop unless we have a strong reason to continue.

You can withdraw your consent at any time. It does not affect what we did before you withdrew it.

To ask, email hello@neuroaffirmrecruitment.com or call +44 (0)23 9206 5450. It is usually free, and we will reply within one month. If your request is complicated, we may need up to two more months, and we will tell you why.

Complaints

If you are unhappy with how we have handled your information, please tell us first, so we can put it right: hello@neuroaffirmrecruitment.com. We will acknowledge your complaint within 30 days, look into it, and tell you what we found.

You can also complain to the Information Commission (ICO) at ico.org.uk/make-a-complaint or on 0303 123 1113.

Age

Our services are for people aged 16 and over.

Changes to this notice

We will update this page when anything changes. Last updated: 1 November 2026.