In short: we collect the answers you give in our self-assessments, your email address, and basic technical data. We use them to produce and deliver your report and plans, to run your subscription, and to measure our advertising. Your assessment answers concern your health, so we only process them with your explicit consent, and we never sell them. You can ask us to delete everything at any time by emailing support@adhdcarevip.com.
1. Who we are
This service is operated by ADHD Care ("we", "us", "our"). We are the data controller for the personal data described in this policy.
For any privacy question or request, contact us at support@adhdcarevip.com. We aim to reply within 5 business days and, in any event, within one month as required by the GDPR.
This policy applies to our websites (including adhdcare.co, adhdcarepl.com, adhdquizinter.com and related domains), our self-assessments, and the emails and reports we send you.
2. What we collect
| Category | Examples | Where it comes from |
|---|---|---|
| Self-assessment responses | Your answers to screening questions about attention, focus, restlessness, procrastination and emotional regulation; your age range and gender if provided; the resulting scores and profile. | You, when you complete an assessment. |
| Contact details | Email address; name if you give it to us in correspondence. | You, when you request your results or contact support. |
| Order and subscription data | Products purchased, amounts, currency, billing dates, subscription status, refund and cancellation records. | You and our payment processor. |
| Payment data | Confirmation of payment, payment method type (card, KakaoPay, NaverPay, BLIK), last four digits where provided by the processor. We never receive or store your full card number. | Stripe. |
| Correspondence | Emails you send to support@adhdcarevip.com and our replies. | You. |
| Technical and usage data | IP address, approximate country, device and browser type, pages viewed, referring source, advertising identifiers, actions taken in the funnel (for example, starting an assessment or reaching checkout). | Automatically, via our servers, cookies and similar technologies. |
3. Why we process your data and on what legal basis
| Purpose | Legal basis (GDPR Art. 6, and Art. 9 where health data is involved) |
|---|---|
| Producing your personalised report, plan and ongoing materials | Performance of a contract; and, for the assessment answers themselves, your explicit consent (Art. 9(2)(a)) |
| Delivering emails you have asked for, including your results and subscription materials | Performance of a contract |
| Taking payment, managing subscriptions, renewals, cancellations and refunds | Performance of a contract; legal obligation (accounting and tax) |
| Answering your support messages | Performance of a contract; legitimate interests (running a support function) |
| Marketing emails and reminders about an assessment you did not complete | Consent, or legitimate interests where permitted; you can opt out at any time |
| Advertising measurement and audience creation (for example, the Meta pixel) | Consent |
| Security, fraud prevention, service reliability and improvement | Legitimate interests; legal obligation |
Where we rely on consent, you may withdraw it at any time. Withdrawing consent does not affect processing carried out before the withdrawal.
4. Health-related data — special protection
Your self-assessment answers describe symptoms and difficulties, and therefore constitute data concerning health under Article 9 of the GDPR. We treat them accordingly:
- We process them only on the basis of your explicit consent, given when you choose to complete an assessment and request your results.
- We use them for one purpose only: producing and improving the report, plan and materials that you asked for.
- We do not sell them, and we do not share them with advertisers. Advertising tools receive only events such as "an assessment was completed" or "a purchase occurred" — never your answers.
- Access inside our organisation is limited to the small number of people who prepare and deliver customer materials and provide support.
- You can withdraw consent and ask for erasure at any time by emailing support@adhdcarevip.com.
5. Who we share your data with
We do not sell personal data. We share it only with service providers who process it on our behalf under written agreements, and only as needed:
| Provider | Purpose | Data involved |
|---|---|---|
| Stripe | Payment processing, subscription billing | Email, payment details you enter with Stripe, order data |
| Resend | Sending and receiving our emails | Email address, message content |
| Cloudflare | Website delivery, security, protection against attacks | IP address, technical request data |
| Huawei Cloud | Server hosting | All data stored by the service |
| Meta Platforms | Advertising measurement and audiences | Pseudonymous identifiers and conversion events — not assessment answers |
We may also disclose data where required by law, to establish or defend legal claims, or in connection with a corporate transaction (in which case this policy will continue to apply, or you will be notified).
6. International transfers
We operate across Europe and Asia, and some of our providers are located outside the European Economic Area. Where personal data is transferred outside the EEA, we rely on appropriate safeguards, principally the European Commission's Standard Contractual Clauses, together with additional technical and organisational measures. You may request a copy of the relevant safeguards by emailing us.
7. How long we keep your data
- Assessment answers and reports: for as long as you are a customer, and up to 24 months after your last interaction, so that we can re-send your materials and prepare follow-up plans. Deleted sooner on request.
- Order, invoice and tax records: as required by Irish and EU accounting law (generally 6 years).
- Support correspondence: up to 24 months.
- Marketing contact data: until you opt out, then we retain a minimal suppression record so that we do not contact you again.
- Technical logs: normally up to 12 months.
8. Your rights
Under the GDPR (and, for users in South Korea, the Personal Information Protection Act) you have the right to:
- access the personal data we hold about you, and receive a copy;
- have inaccurate data corrected;
- have your data erased ("right to be forgotten");
- restrict or object to processing, including profiling and direct marketing;
- receive your data in a portable, machine-readable format;
- withdraw consent at any time;
- not be subject to a decision based solely on automated processing that produces legal or similarly significant effects. Our assessments generate an automated score and profile, but this is educational information only — it is not a diagnosis and produces no legal effect.
To exercise any right, email support@adhdcarevip.com. We will not charge you or treat you differently for making a request.
You also have the right to complain to a supervisory authority. In Ireland this is the Data Protection Commission (dataprotection.ie). In South Korea it is the Personal Information Protection Commission (pipc.go.kr). You may also complain to the authority in your own country of residence.
9. Cookies and similar technologies
We use cookies and similar technologies for essential site functions, and — with your consent — for advertising measurement. See our Cookie Policy for the full list and how to control them.
10. Children
Our services are intended for adults aged 18 or over. Where an assessment concerns a child (for example, a screening completed by a parent), it is completed by the parent or legal guardian, who provides the information and the necessary consent. We do not knowingly collect data directly from children. If you believe a child has provided us with personal data, contact us and we will delete it.
11. How we protect your data
We use encryption in transit (HTTPS/TLS), access controls and authentication for administrative systems, segregated environments, and the principle of least privilege. Payment card details are handled entirely by Stripe, a PCI-DSS Level 1 certified provider, and never reach our servers. No system is perfectly secure; if a breach occurs that is likely to result in a high risk to your rights, we will notify you and the relevant supervisory authority as required by law.
12. Changes to this policy
We may update this policy to reflect changes in our service or the law. The "last updated" date at the top always shows the current version. If the changes are material, we will notify you by email or through a notice on the site before they take effect.
13. Contact us
ADHD Care
Email: support@adhdcarevip.com
For privacy requests, please write "Privacy request" in the subject line.