Terms and privacy

These terms apply to the NeurodiverseHelp toolkit: the online toolbox for managers and HR at neurodiversehelp.com. NeurodiverseHelp is a trading name of Neurokracht, the sole proprietorship of Marc Bloemendal, Bermerstraat 15, 7731 CZ Ommen, the Netherlands, registered with the Netherlands Chamber of Commerce (KvK) under number 98522604 ([email protected]).

The toolkit is for organisations, not for consumers. Anyone who starts a trial or places an order does so on behalf of an organisation and confirms that they are authorised to do so. Part B explains how we handle personal data.

Part A. Terms

1. What the toolkit is

The toolkit is a set of online tools for managers and HR to work well with neurodivergent colleagues: tools that produce a message, card, agenda or agreement, cards about the seven NeuroStrengths, and the neuro-inclusion scan. It is built on the NeuroStrengths approach to individual development in neurodiversity.

The toolkit does not give a diagnosis and does not give medical, legal or occupational health advice. It does not replace occupational health, HR advice or legal advice. The organisation decides what it does with the results and remains responsible for that.

2. The trial

• The trial lasts 14 days and is free. During the trial, three people from the organisation can use the toolkit: the person who started the trial and two colleagues.
• There is one trial per organisation. We recognise an organisation by the domain of its work email address and, where given, its Companies House or charity number.
• If the organisation does nothing after the trial, access simply ends. There is no invoice without an order.
• We may refuse or end a trial in case of misuse or if the details are not correct.

3. Orders and subscriptions

• The organisation places an order through the order form in the toolkit, or through the link that lets someone without an account approve the subscription. The agreement is formed when the form is sent. The organisation receives a confirmation by email.
• The plans and prices are on the NeurodiverseHelp website. All prices are per organisation per month, in pounds sterling and excluding VAT. For more than 100 users we agree a price on request.
• As we invoice from the Netherlands, UK business customers account for UK VAT themselves under the reverse charge. Please give your VAT number on the order form if your organisation is VAT registered. The prices assume that your organisation buys in the course of its business. If it is not VAT registered, or buys only for non-business activities, please contact us before you order so we can confirm the VAT treatment.
• The Team plan includes one consultation with Marc per quarter (Ask Marc), the Organisation and Enterprise plans two. A consultation takes about half an hour, online or by phone, in English. Consultations not used in a quarter lapse at the end of that quarter. There are no consultations during the trial.

4. Term and cancellation

• Annual plan: runs for twelve months from the date of the order. It then renews for twelve months each time, unless the organisation cancels at least one month before the end.
• Monthly rolling plan: runs per month and can be cancelled at the end of any month.
• To cancel, email [email protected]. We confirm the cancellation by email.
• Moving to a larger plan is possible at any time and takes effect straight away. Moving to a smaller plan takes effect at the next renewal.

5. Invoices and payment

• We invoice in advance in pounds sterling: yearly for an annual plan, monthly for a monthly rolling plan. Payment terms are 14 days.
• If an invoice is still unpaid after a reminder, we may pause access until payment has been received.
• We may change prices no more than once a year and announce this at least two months in advance. If the price rises by more than inflation, the organisation may cancel from the date the new price applies.

6. Users

• The number of users depends on the plan. Accounts are personal: do not share a password with others.
• The organisation's admin invites colleagues and withdraws their access when they leave the organisation or no longer need the toolkit.
• The organisation makes sure its users know these terms.

7. Good use and employees' data

• The tools work in the browser. We do not store or see what a user fills in.
• Describe the situation, not the person. Do not enter diagnoses or other information about employees' health, including in a question you prepare for an AI assistant.
• Do not ask an employee about a diagnosis. The "Working with me" document is filled in voluntarily by an employee; it belongs to the employee, and they decide who it is shared with.
• The organisation is responsible for what it does with the results of the tools, such as a message it sends or an agreement it records, including under data protection law.
• You may not misuse the toolkit, get round its security or copy its content on a large scale. In case of misuse we may block access.

8. Intellectual property

The tools, texts, cards, questions and design of the toolkit belong to Neurokracht. What the organisation makes with the tools, such as messages, task cards, agendas and agreements, it may use and adapt freely within the organisation, also after the subscription ends. Distributing, reselling or using the tools and cards themselves outside the organisation is only allowed with our written permission.

9. Availability and development

We do our best to keep the toolkit available, working well and secure, but cannot guarantee that it will always work without interruption. Where possible we announce maintenance in advance. The toolkit keeps growing: tools may change and new tools may be added. Tools we announce are an expectation, not a promise.

10. Liability

We are only liable for direct loss, up to no more than the amount the organisation paid for the toolkit in the twelve months before the loss. We are not liable for indirect or consequential loss, such as loss of profit, or for decisions the organisation makes on the basis of the toolkit. These limits do not apply in case of intent or gross negligence on our part, and nothing in these terms limits liability that cannot be limited by law, such as liability for death or personal injury caused by negligence, or for fraud.

11. End of the subscription

When the trial or subscription ends, access closes. What the organisation made with the tools remains its own. Part B explains which data we keep after that and for how long.

12. Changes, law and contact

If we change these terms, you will see this from the date at the top. We tell admins about important changes at least one month in advance. These terms are governed by the laws of the Netherlands; disputes go to the competent court in the district of Overijssel, the Netherlands. Questions? Email [email protected].

Part B. Privacy

Neurokracht (trading as NeurodiverseHelp) is the controller for the data below, under the UK GDPR and the EU GDPR. We process as little as possible: what is filled in in the tools is not stored.

What data and why

• User accounts: name, work email address, password (stored only as a secure hash), whether someone is an admin, and when someone last logged in. Needed to give access. Everyone in the organisation can see who has access: name, email address, whether someone is an admin and whether someone has logged in yet. Only the organisation's admins can see when someone last logged in. Lawful basis: the contract with the organisation and our legitimate interest in only letting authorised people in.
• Invitations: name and email address of colleagues an admin invites. We receive these from the admin who invites you. Lawful basis: the contract with the organisation.
• Organisation: name, Companies House or charity number (if given), the domain of the email address, the status of the trial or subscription and the plan. Needed to manage the trial and subscription. Lawful basis: the contract.
• Order: invoice name, invoice address, invoice email address, VAT number, purchase order number, contact person, the moment of agreement and the IP address at that moment. Needed for the invoice and as evidence of the order. Lawful basis: the contract and our legal obligation to keep accounting records.
• Approval link: name and email address of the person a colleague forwards the order form to. We receive these from that colleague. Lawful basis: our legitimate interest in having the order approved.
• Neuro-inclusion scan: the answers (yes, no or don't know) per organisation, with the date. We do not record who filled in the scan. This lets the organisation compare a later scan with the previous one.
• Use: per organisation, how often a tool was opened on a day, not per person. This tells us which tools are valuable.
• Ask Marc: if you request a consultation, your question goes by email to Marc with your name and email address, so that he can arrange a time with you. The question itself is not stored in the toolkit: there we only keep who requested a consultation and when, to keep track of the number per quarter. Describe the situation, not the person. Lawful basis: the contract.
• Technical data: when someone logs in, the IP address and a log of important actions, such as an invitation or an order. Needed for security. Lawful basis: our legitimate interest in keeping the toolkit secure.

We send emails about the trial: the invitation to choose a password, a reminder halfway and on the last day, and the confirmation of an order. We do not send marketing without consent.

Who else processes the data

• EuroVPS (hosting): the toolkit and its database run on a server of EuroVPS in the Netherlands.
• Cloudflare (security and availability): traffic runs encrypted through Cloudflare. When logging in, requesting a trial and approving an order, Cloudflare Turnstile checks (without puzzles) that a person is using the page; Cloudflare sees the IP address and technical details of the browser.
• Google (email): our mailbox is hosted on Google Workspace. Replies to our emails and the questions you send through Ask Marc arrive there.

We send emails from our own server. Data is not passed to anyone else unless the law requires us to.

International transfers

Your data is stored in the Netherlands, in the European Economic Area, to which the UK allows transfers under its adequacy regulations. Cloudflare and Google are US companies; transfers to them are covered by the EU-US Data Privacy Framework and its UK Extension.

Cookies

The toolkit only uses a strictly necessary cookie that keeps you logged in. Cloudflare may set a technical cookie to recognise attacks. We do not use cookies to track you and we do not use analytics or advertising services.

How long we keep data

• A trial without an order: we delete the accounts, invitations, scans and the organisation's details no later than three months after the end of the trial.
• A subscription: as long as it runs, and then no longer than three months. If access is paused because an invoice is unpaid, we keep the data until the subscription is resumed or ended.
• If an admin withdraws a colleague's access, that account is kept without access so the admin can restore it, and is deleted together with the organisation's other data. Ask us if you want it deleted sooner.
• Orders and invoices are kept for seven years, because Dutch tax law requires this, even when the other data has already been deleted.
• Emails with a question sent through Ask Marc are deleted no later than one year after the consultation.
• The security log is kept for no more than 12 months.
• Backups are overwritten automatically: database backups after 14 days, full server backups after 30 days.

Security

All connections are encrypted and passwords are stored only as secure hashes. After repeated failed login attempts, an account is locked temporarily. Users can turn on two-step verification.

Your rights

You have the right to access your data, to have it corrected or deleted, to ask us to restrict processing, to object, and to receive your data in a common format. Email [email protected]; we respond within one month. If we cannot resolve it together, you can complain to the Information Commissioner's Office (ICO) in the UK, or to the Dutch data protection authority, the Autoriteit Persoonsgegevens.