Privacy Policy
The Inclusive Stories Neurodivergent Education & Community Hub CIC
Company No. 16844393 | hello@tisnech.co.uk | Greenwich, London
Last updated: 22 May 2026
1. Who we are
The Inclusive Stories Neurodivergent Education & Community Hub CIC, trading as TISNECH, is a Community Interest Company registered in England and Wales (Company No. 16844393). We are the data controller for all personal information collected through our website, session booking forms, and any other means of contact.
If you have any questions about this policy, contact us at: hello@tisnech.co.uk. Post: TISNECH, Greenwich, London.
2. What information we collect
From families and service users:
- Names, addresses, email addresses, and phone numbers of parents and carers
- Children's names, dates of birth, preferred names, and gender
- Diagnosis information including autism, ADHD, PDA profile, ARFID, dyslexia, dyspraxia, and related conditions
- Medical information including conditions, allergies, and medication details
- Sensory and communication profiles
- Safeguarding information where relevant
- Education status and EHCP information
- Supporting documents such as reports and care plans shared voluntarily
From website visitors:
- Anonymised analytics data (pages visited, time on site, device type) if analytics tools are used
- Information submitted through any contact or enquiry forms
From funders, partners, and professionals:
- Names, job titles, organisation names, and contact details
3. Why we collect this information and our lawful basis
For families and service users:
General contact information (name, address, email, phone) is collected on the lawful basis of legitimate interests (UK GDPR Article 6(1)(f)) — to enable us to communicate with you about sessions and services.
Special category data (health, diagnosis, safeguarding information) is collected on the lawful basis of substantial public interest (UK GDPR Article 9(2)(g)), specifically the safeguarding of children and individuals at risk, in line with Schedule 1, Part 2, Paragraph 18 of the Data Protection Act 2018. We also rely on explicit consent (Article 9(2)(a)) obtained through our session booking declarations.
Image and video data is collected on the basis of explicit consent (Article 6(1)(a) and Article 9(2)(a)) in line with the preferences stated in our session booking form.
For website visitors:
Anonymised analytics data is collected on the basis of legitimate interests to help us understand how our website is used and improve it.
For funders and partners:
Contact and professional information is collected on the basis of legitimate interests to enable us to manage our working relationships.
4. How we store your information
All personal data is stored securely in password-protected systems accessible only to authorised TISNECH staff. Any paper records are stored in locked filing on our premises.
We do not transfer personal data outside the United Kingdom. We do not use your data for automated decision-making or profiling.
5. Who we share your information with
We will never sell your personal data. We will never share it with third parties for commercial purposes.
We may share information only in the following limited circumstances:
- With TISNECH staff and authorised volunteers directly involved in supporting your child, on a strict need-to-know basis
- With statutory agencies (such as social services, the police, or the NHS) where we are legally required to do so, or where we have a safeguarding concern requiring us to act to protect a child's welfare — we will inform you where possible unless doing so would put a child at risk
- With other professionals involved in your child's care (such as therapists or schools) only with your prior explicit consent
- With grant funders or commissioners using anonymised, aggregated impact data only — never identifiable personal information
6. How long we keep your information
| Type of data | Retention period |
|---|---|
| Session booking and registration records | 3 years from date of last session |
| Financial records | 7 years (legal requirement) |
| Safeguarding records | As required by statutory guidance — may exceed 3 years |
| Image and video consent records | For as long as any image taken under that consent remains in use |
| Professional and funder contact records | 3 years from last contact |
| Website enquiry form submissions | 12 months |
After the applicable retention period, data is securely deleted or physically destroyed.
7. Your rights
Under UK GDPR you have the following rights:
Right of access — You may request a copy of any personal data we hold about you or your child. We will respond within one calendar month.
Right to rectification — You may ask us to correct inaccurate or incomplete information.
Right to erasure — You may ask us to delete your information, subject to any legal obligations requiring us to retain it (for example, safeguarding or financial records).
Right to restrict processing — You may ask us to limit how we use your information in certain circumstances.
Right to data portability — You may request your data in a structured, commonly used format where technically feasible.
Right to withdraw consent — Where we rely on consent as our lawful basis, you may withdraw it at any time without affecting the lawfulness of prior processing.
Right to object — You may object to processing based on legitimate interests.
Right to complain — If you are unhappy with how we have handled your data, you have the right to complain to the Information Commissioner's Office (ICO) at www.ico.org.uk or by calling 0303 123 1113.
To exercise any of these rights, email us at hello@tisnech.co.uk. We will respond within one calendar month.
8. Photographs and videos
We only photograph or film children in strict accordance with the consent given in the session booking form. Consent is always obtained before any images are taken or used.
You may change or withdraw image consent at any time by contacting hello@tisnech.co.uk. Any existing images will be removed from active use promptly upon withdrawal of consent.
Where a parent or carer has indicated that a legal restriction (such as a court order) applies to their child's image, we will ensure under no circumstances that any image of that child is taken, stored, or shared.
9. Cookies
Our website may use essential cookies to function correctly. We do not currently use advertising or tracking cookies. If this changes, this policy will be updated and consent sought where required.
10. Changes to this Privacy Policy
We may update this Privacy Policy from time to time. We will notify active service users of any material changes by email. The most recent version will always be available on our website. The date at the top of this document reflects when it was last updated.
Questions about this policy?
hello@tisnech.co.uk