Privacy

At STAND (Stronger Together for Autism and Neurodivergence SCIO), we take your privacy seriously. We are committed to handling all personal information lawfully, fairly, and transparently in line with the UK GDPR and Data Protection Act 2018.

We only collect the information we need to carry out our charitable purposes, store it securely, and never share it without consent unless required by law.

Different parts of our work involve different types of information, so we have separate privacy notices explaining how data is handled in each context. You can read the relevant notice below for more detail. Together, these notices outline how we protect your information, the lawful basis for processing it, and your rights under data protection law.

If you have any questions about how we manage your data, you can contact us at info@standuk.co.uk.

1. Who we are

STAND – Stronger Together for Autism and Neurodivergence SCIO (“STAND”, “we”, “us”) is a registered Scottish charity (charity number SC051158).

We work to ensure that Scotland is a place where neurodivergent children, their families, and carers can thrive.

Contact details:

Email: info@standuk.org

Registered Office: STAND, 13 Tandberg Way, Haddington, EH41 3FZ

Website: www.standuk.co.uk

STAND is the data controller for any personal information you provide when you contact us by email or share documents with us via our information drive (Google Drive).

2. What information we collect

When you contact us or upload information, we may collect:

• Your name and contact details (e.g. email address, phone number)
  
  

• The content of your email, message, or document
  
  

• Any additional personal data you choose to share (for example, information about a child or family member)
  
  

We ask that you only include the information we have requested or that is necessary for your enquiry, and that you avoid sharing sensitive personal data (such as medical details) unless it is clearly relevant.

3. How we use your information

We use your information to:

• Respond to and manage your enquiry
  
  

• Organise and store information shared through our info email and Google Drive
  
  

• Keep appropriate records of correspondence and materials for our legitimate purposes (for example, monitoring engagement or evidence for project delivery)
  
  

We do not use your data for marketing purposes unless you have explicitly consented.

4. Lawful basis for processing

Our lawful bases under Article 6 of the UK GDPR are:

• Legitimate interests – to enable us to respond to enquiries and manage information relevant to our charitable work;
  
  

• Consent – where you have given explicit permission for us to retain or share information;
  
  

• Legal obligation – where processing is necessary to comply with the law.
  
  

If you provide information about a person’s health, neurodivergence, or other “special category data”, we rely on Article 9(2)(d) of the UK GDPR, which permits processing by a not-for-profit body with appropriate safeguards.

5. Who we share your information with

We only share your information when necessary and appropriate, such as:

• With relevant STAND trustees, staff, or volunteers handling your enquiry;
  
  

• With our secure IT service providers (including Google Workspace) who act as data processors on our behalf.
  
  

We will never sell your data or share it with third parties for marketing. We will only disclose information to others if required to do so by law or with your explicit consent.

6. How long we keep your information

We keep emails, shared documents, and enquiry records for up to 12 months, unless there is an ongoing project or reason to retain them longer (for example, safeguarding, project evidence, or accountability). After that, they are securely deleted from our systems. 

7. How we keep your information secure

Your information is stored within Google Workspace, which meets international security standards and uses encryption in transit and at rest.

Access is strictly limited to authorised members of the STAND team, and all accounts are protected by multi-factor authentication.

8. Your data protection rights

You have the right to:

• Access a copy of your personal data;
  
  

• Request correction or deletion of your data;
  
  

• Object to or restrict how we process your data;
  
  

• Withdraw consent where processing is based on consent.
  
  

To exercise any of these rights, please contact info@standuk.org.

If you remain unhappy after contacting us, you can raise your concern with the Information Commissioner’s Office (ICO):
www.ico.org.uk or 0303 123 1113.

9. Updates to this notice

We may update this notice from time to time. The most current version will always be available on our website.
 

This version was last updated October 2025.

10. Contact us

For any questions about this notice or how we handle your data, please email info@standuk.org with the subject line “Data protection enquiry.”

1. Who we are

STAND (Stronger Together for Autism and Neurodivergence SCIO) is a Scottish Charitable Incorporated Organisation (charity number SC052239).

Our registered office is: 13 Tandberg Way, Haddington, EH41 3FZ.

Website: www.standuk.co.uk

 We are the data controller for any personal information you provide when you contact us as part of the Empowerment Projects. 

2. What information we collect

 When you contact us or upload information as part of the Empowerment Projects, we may collect:

• Your name and contact details (for example, email address, phone number)
  
  

• Information you choose to share about your experience of services (such as education, CAMHS, housing, or healthcare)
  
  

• Any documents or attachments you voluntarily send
  
  

• Notes from meetings, interviews, or discussions (where relevant)
  We ask that you only include the information we have requested or that is necessary for the project, and that you avoid sharing sensitive personal data (such as medical details) unless it is clearly relevant. standuk.co.uk
  
  

3. How we use your information

We use your information to:

• Respond to and manage your submission or contact in relation to the Empowerment Projects
  
  

• Organise and store information shared through our project inboxes and secure storage (e.g., Google Workspace)
  
  

• Keep appropriate records of correspondence and materials for our legitimate purposes, including developing anonymised case studies to illustrate real experiences and inform our work
  We do not use your data for marketing purposes unless you have explicitly consented. [Adapted slightly from main policy]. standuk.co.uk
  
  

4. Lawful basis for processing

Our lawful bases under Article 6 of the UK GDPR are:

• Legitimate interests – to enable us to respond to enquiries and manage information relevant to our charitable and project work
  
  

• Consent – where you have given explicit permission for us to retain or share information
  
  

• Legal obligation – where processing is necessary to comply with the law
  If you provide information about a person’s health, neurodivergence, or other “special category” data, we rely on Article 9(2)(d) of the UK GDPR, which permits processing by a not-for-profit body with appropriate safeguards. standuk.co.uk
  
  

5. Who we share your information with

 We only share your information when necessary and appropriate, such as:

• With relevant STAND trustees, staff, or volunteers handling the Empowerment Projects
  
  

• With our secure IT service providers (including Google Workspace) who act as data processors on our behalf
  We will never sell your data or share it for marketing purposes. We will only disclose information to others if required to do so by law or with your explicit consent. standuk.co.uk
  
  

6. How long we keep your information

We retain personal data only for as long as necessary to fulfil the project purpose, after which it will be securely deleted or anonymised. This aligns with our main policy’s approach. standuk.co.uk

7. Your rights

Under data protection law you have the right to:

• Request access to the information we hold about you
  
  

• Request correction of any inaccurate or incomplete information
  
  

• Request deletion of your data (where legally possible)
  
  

• Withdraw your consent at any time (where processing is based on consent)
  
  

• Object to or restrict how your data is used (where relevant)

If you would like to exercise any of these rights, please contact us at: info@standuk.co.uk

8. Complaints

 If you are unhappy with how we handle your data, you have the right to complain to the Information Commissioner’s Office (ICO): www.ico.org.uk