Legal
Privacy Policy
Effective 14 May 2026 · ADHD WORKS LIMITED · Company No. 14273128
1. Who We Are
ADHD WORKS LIMITED (trading as “ADHDWorks”), registered in England & Wales under company number 14273128, is the data controller for the personal data processed through https://adhdworks.biz and https://jobcoffin.com (“JobCoffin”).
For data protection queries, contact us at [email protected].
2. What We Collect
We collect the following categories of personal data:
- Account data: email address, display name, and authentication tokens when you sign up or use magic link login.
- Payment data: name, email, billing address, and payment method details processed by Stripe. We do not store card numbers.
- Assessment and profile data: Work Style Assessment responses, archetype results, coaching profiles, and career data you provide.
- Chat data: messages exchanged with Coach Hype AI, our AI-powered coaching assistant.
- Contact data: email and, if you opt in, phone number for SMS communications.
- Usage data: pages visited, interactions, device information, and IP address (anonymised for analytics).
- Images: if you voluntarily use our Selfie Capture feature, images are processed in your browser to generate AI artwork. Images are not stored on our servers unless you explicitly save the result.
3. How We Use Your Data
We process your data for the following purposes:
- Service delivery (contract): fulfilling purchases, delivering assessments, generating reports, and providing AI coaching.
- Account management (contract): authentication, subscription management, and support.
- Marketing communications (consent): nurture emails, product updates, and promotional messages. You can unsubscribe at any time.
- Analytics (legitimate interest / consent): understanding site usage via Google Analytics to improve the product. GA4 only loads if you consent via our cookie banner.
- Error monitoring (legitimate interest): Sentry collects technical error data to help us fix bugs. No marketing profiling occurs from this data.
- AI-powered features (consent / contract): processing your input through AI models to generate coaching advice, career assessments, and resume rewrites.
4. Lawful Basis (UK GDPR)
We rely on the following lawful bases under UK GDPR Article 6:
- Contract (Art. 6(1)(b)): processing necessary to deliver products and services you have purchased.
- Consent (Art. 6(1)(a)): marketing emails, SMS, analytics cookies, and AI feature usage. You may withdraw consent at any time.
- Legitimate interest (Art. 6(1)(f)): error monitoring, fraud prevention, and service improvement where the processing does not override your rights.
5. Third-Party Data Processors
We share data with the following service providers who process it on our behalf. All US-based processors operate under appropriate safeguards (Standard Contractual Clauses or equivalent).
| Vendor | Purpose | Data | Location |
|---|---|---|---|
| Supabase Inc. | Authentication, database, and AI chat storage | Email, auth tokens, user profile, chat messages, usage data | United States |
| Stripe Inc. | Payment processing | Name, email, billing address, payment method | United States |
| Twilio SendGrid | Transactional and marketing email delivery | Email address, email content, delivery metadata | United States |
| Google LLC | Website analytics (Google Analytics 4) | IP address (anonymised), device info, pages visited, behaviour | United States |
| Functional Software Inc. (Sentry) | Error monitoring and performance tracking | Error context, IP address, browser/OS information | United States |
| OpenAI / Anthropic | AI-powered coaching chat (Coach Hype AI) | Chat messages and user input | United States |
| Fish Audio | Text-to-speech functionality | Text input for voice synthesis | United States |
| Cloudflare Inc. | CDN, DNS, and DDoS protection | IP address, request headers | United States |
6. Cookies
We use cookies for essential site functionality and, with your consent, for analytics and personalisation. Google Analytics (GA4) is only loaded after you accept analytics cookies via our cookie banner.
For full details, see our Cookie Policy.
7. Data Retention
- Account data: retained while your account is active, then deleted within 30 days of account closure.
- Payment records: retained for 7 years to comply with UK tax and accounting obligations.
- Marketing data: retained until you unsubscribe or withdraw consent.
- Error logs: Sentry retains event data for 90 days.
- Analytics data: Google Analytics retains data for 14 months (GA4 default).
8. Your Rights
Under UK GDPR, you have the right to:
- Access the personal data we hold about you.
- Rectify inaccurate or incomplete data.
- Erase your data (“right to be forgotten”).
- Restrict processing in certain circumstances.
- Data portability: receive your data in a structured, machine-readable format.
- Object to processing based on legitimate interest.
- Withdraw consent at any time without affecting the lawfulness of prior processing.
To exercise any of these rights, email [email protected]. We will respond within 30 days.
If you are unsatisfied with our response, you have the right to lodge a complaint with the Information Commissioner’s Office (ICO).
9. AI-Powered Features
Several features on this site use artificial intelligence, including:
- Coach Hype AI: an AI coaching chatbot powered by large language models (OpenAI, Anthropic). Your messages are sent to these providers for processing. AI responses are not human advice and should not replace professional guidance.
- Resume analysis and rewriting: your resume text is processed by AI models to generate suggestions and rewrites.
- Hero image generation: if you upload a selfie, it is processed locally in your browser and then sent to an AI image generation service to create stylised artwork.
- Work Style Assessment: your responses are analysed using AI to generate personalised reports and recommendations.
We do not use AI to make automated decisions with legal or similarly significant effects without human review. You may request human review of any AI-generated assessment by contacting [email protected].
10. International Data Transfers
Our third-party processors are based in the United States. These transfers are protected by Standard Contractual Clauses (SCCs) as approved by the UK Secretary of State, or equivalent safeguards under the UK International Data Transfer Agreement (IDTA).
11. Children
Our services are not directed at individuals under 16. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact [email protected] and we will delete it promptly.
12. Changes to This Policy
We may update this policy from time to time. Material changes will be communicated via email or a prominent notice on the site. The “effective date” at the top of this page indicates when the latest version took effect.
13. Contact
ADHD WORKS LIMITED
Trading as ADHDWorks
Farnborough, Hampshire, United Kingdom
Mailing address: 999 Metropolis Alley #1, Atlanta, GA 30309, USA
Email: [email protected]