Privacy notice

Axon Neuro is a trading name of SW HEALTH LTD, a company registered in England and Wales (company number 16232744), registered office 6 Barnes Close, Luddington, Stratford-Upon-Avon, England, CV37 9UA. We are the controller of the personal data we process to provide the service (see the next section for the roles of others), and we are registered with the Information Commissioner's Office (ICO) as a data controller under registration reference ZC188855. You can contact us at info@axonneuro.co.uk.

For most of the personal data described here we are the controller: this includes the data used to run the portal, match you with a specialist, take and manage payment, keep your records, and manage safeguarding.

Some others we work with have their own responsibilities for personal data:

• A funder or case manager who arranges support for someone else (for example an insurer, solicitor, deputy or local authority) is a separate, independent controller for the information they hold in their own case file and for what they choose to share with us.
• A specialist who delivers support is usually an independent controller for their own professional records of the support they provide.
• Our technology suppliers act as our processors, handling data only on our instructions: Supabase (database and hosting, London region), Resend (email), Vercel (hosting) and Cloudflare (security checks).
• Stripe, our payment provider, acts as our processor for some payment functions and as a controller in its own right for others, such as fraud prevention and meeting its own legal duties.

Where we share information with a funder, case manager or specialist, that may be a sharing between separate controllers rather than only processing on our behalf.

Depending on how you use the website and portal, we may collect:

• Website enquiries: when you send an enquiry through our contact form we collect your name, your contact details, and the information you choose to include in your message. If your message includes health information, you share that voluntarily.
• People arranging or enquiring: your name, contact details, organisation and role, postcode, and what you are looking for.
• People being supported (clients): name, date of birth, address and contact details, next-of-kin details, who has authority to arrange and pay, and the care and health information needed to match and deliver support safely. This includes special-category health data.
• Specialists (associates): contact and identity details, right-to-work and tax information (including your National Insurance number and UTR), DBS and safeguarding details, professional memberships and registration, qualifications, insurance details, availability, and, where you choose to provide them, your driving licence and DVLA check code. We collect the details needed to pay you; your bank details for payouts are held by our payment provider, not by us. If you give your separate, optional consent, we may also use photographs, videos and testimonials you provide in our marketing.
• People named as references: if you give us a reference, we collect that person's name, contact details, employer and job title, and their relationship to you, so we can verify your suitability. If you name someone as a reference, please make sure you have their permission to share their details with us first.
• Account and usage: login credentials for staff and associates, the secure sign-in links used by case managers and service users, the essential cookies described in our cookie policy, and privacy-friendly, cookieless usage analytics that help us improve things: on this website they run without identifying you or storing anything on your device, and on the portal only if you consent. We also process the basic technical data needed to serve the website and portal securely.

• To respond to enquiries, provide and arrange our services, and manage bookings and payments (performance of a contract, and our legitimate interests in running the service).
• To deliver support safely and match the right specialist. For special-category health data, where you arrange support for yourself we rely on your explicit consent, captured and recorded when you complete the intake; where support is arranged and funded for you by someone else (for example a case manager), or where we need to keep records to deliver and evidence the support, we rely on the health or social care basis in the UK GDPR (Article 9(2)(h)).
• To vet and pay specialists, and to meet our legal and safeguarding responsibilities.
• To understand how the website and portal are used so we can improve them, using privacy-friendly, cookieless analytics (our legitimate interests for anonymous website page counts; on the portal, only with your consent).

You can withdraw consent at any time. Withdrawing consent does not affect anything we did before you withdrew it.

We do not sell your data. We share it only with trusted providers who process it on our behalf:

• Supabase, our database and authentication provider, hosted in the UK or EU (London region).
• Stripe, our payment provider, to take payments and pay specialists securely.
• Resend, our email provider, so we can receive and reply to enquiries and send confirmations.
• Vercel, our hosting provider, to run the website and portal.
• Cloudflare, whose Turnstile security check runs on our public forms (for example the contact form and the portal sign-in) to block automated abuse. It checks signals such as your IP address and browser to tell people from bots.

We share client information with the specialist arranged for them, and with our staff who need it to run the service. We share information more widely only where the law requires it.

Personal data is stored in the UK or the EU (London region). Where a provider processes data outside the UK, we rely on appropriate safeguards.

We keep personal data only as long as we need it for the purposes above and to meet our legal and safeguarding obligations, then delete or anonymise it. Retention periods vary by record type; contact us for details for a specific record.

If you are a case manager, solicitor, insurer, commissioner or other professional, we may hold your work contact details so that we can tell you about our reablement support service and answer your questions about it.

• What we hold: your name, job title, work email address, work telephone number, the organisation you work for, and a record of any conversations we have with you about our service. We hold these details about you in your professional capacity only. We do not hold your home address, your personal telephone number, or any health information about you.
• Where we get it from: from you directly, from your organisation, from publicly available professional sources such as your employer's website or your professional profile, or from someone who suggested we speak to you. We do not use automated tools to collect contact details.
• Why we hold it: to let professionals who arrange support for people with neurological conditions know that our service exists in their area, and to keep track of our conversations with you.
• Our lawful basis: for people working at companies and other organisations, our lawful basis is legitimate interests: our interest in making our service known to the people who commission it, and the interest of the people you support in being offered a suitable local provider. We have carried out an assessment weighing this against your rights, and we can send you a copy on request. If you are a sole trader or in a partnership we will only contact you electronically if you have agreed to it.
• How long we keep it: we review these records 24 months after we last had contact with you, and delete anything we no longer need. If you ask us not to contact you, we keep a minimal record of that request for longer, so that we do not contact you again by mistake.
• Telephone calls: we screen telephone numbers against the Telephone Preference Service and the Corporate Telephone Preference Service before calling.

You can tell us to stop at any time and we will. Email info@axonneuro.co.uk or reply to any message from us, and we will remove you from all contact, not just the method you used to tell us. You do not have to give a reason, and we do not have to weigh it against anything: where you object to direct marketing, we stop.

You also have the usual rights over the information we hold about you, set out in the next section.

You have the right to ask for a copy of your data, to have it corrected or deleted, to restrict or object to certain uses, to data portability, and to withdraw consent. To exercise any of these, email info@axonneuro.co.uk and we will respond within the time the law allows. If you are not happy with how we handle your data, you can also complain to the Information Commissioner's Office (ico.org.uk), the UK regulator we are registered with as a data controller (reference ZC188855).

We may update this notice as the service develops, and the latest version always appears on this page. For any question about how we use your data, email info@axonneuro.co.uk.