Privacy Policy
Last updated: 16 June 2026
This policy explains how Hypha Ltd, trading as Autivate, collects and uses your personal data, and your rights under the UK GDPR and the Data Protection Act 2018. We are the "data controller" for the information described below.
Who we are
- Controller: Hypha Ltd (trading as Autivate), a company registered in England and Wales, company number 16444012.
- Registered office: The Granary Workshops, Long Dolver Drove, Soham, Ely, Cambridgeshire, CB7 5UP.
- Contact for data protection: [email protected].
- ICO registration: Hypha Ltd's registration with the Information Commissioner's Office (data protection fee) is currently in progress.
The information we collect
| Where | What | Why | Lawful basis |
|---|---|---|---|
| Enquiry form | Name, email, optional age, optional interests/experience, optional message. | To respond to your enquiry and arrange a session. | Consent, and our legitimate interest in responding to enquiries. |
| Chat widget | The messages you type and a randomly generated chat ID stored in your browser. A team member may continue the conversation. | To answer questions and provide support. | Consent, and our legitimate interest in supporting visitors. |
| Email / phone | Anything you choose to send us. | To correspond with you. | Consent / legitimate interest. |
| Website & hosting | Standard server and Cloudflare logs (e.g. IP address, browser type) and functional cookies/storage. | Security, fraud/abuse prevention and keeping the site working. | Legitimate interest in a secure, functioning website. |
Sensitive (special-category) information
Because Autivate supports autistic and ADHD people, anything that reveals or implies your neurodivergence or health is special-category data, which has extra protection in law. You do not need to tell us anything about your health or diagnosis. If you choose to share such information (for example to help us make adjustments), we rely on your explicit consent to use it, and we use it only for the purpose you gave it. You can withdraw that consent at any time by emailing us.
Please do not enter health or other sensitive details into the chat widget. If you need to discuss something sensitive, email us so we can handle it appropriately.
Children's information
Our sessions are aimed at people aged 16 and over, and we occasionally work with younger people. Where a participant is under 18, we ask a parent or guardian to be involved and to give consent for any personal data we hold about the young person. We collect the minimum information necessary and keep it no longer than needed. See our Safeguarding statement.
Who we share it with
- Service providers acting for us ("processors"). Our website is delivered through Cloudflare and hosted on our server. Our enquiry and chat features notify us through Telegram (Telegram FZ-LLC), so the content of your enquiry or chat message is processed by Telegram and may be stored on servers outside the UK. Where data is transferred outside the UK, we rely on the appropriate safeguards permitted by UK data protection law.
- We do not sell your data or use it for third-party advertising.
- We may disclose information where required by law or to protect someone's safety (see Safeguarding).
How long we keep it
We keep enquiry details for up to 12 months after our last contact, and chat logs for up to 6 months, unless we need them longer to provide a service you've asked for or to meet a legal obligation. We then delete or anonymise them.
Your rights
You have the right to access your data; to have it corrected or erased; to restrict or object to its use; to data portability; and to withdraw consent at any time. To exercise any of these, email [email protected]. We will respond within one month.
If you are unhappy with how we have handled your data you can complain to the Information Commissioner's Office (ICO) at ico.org.uk or by calling 0303 123 1113. We'd appreciate the chance to put things right first.
Cookies and browser storage
See our Cookie Policy for details of the functional storage we use.
Changes
We may update this policy from time to time. The "last updated" date above shows the latest version.