Privacy Policy
Last updated: 22/04/2026 · Applies to atlasautism.xyz
Summary
We collect only the data we need to run our service. We never sell your data. You have full rights over your information. This policy is written in plain English — not legalese.
1. Who we are
Atlas Autism is a SEND consultancy service operated by Guido Galindo, trading as Atlas Autism. Our website is atlasautism.xyz.
For the purposes of UK GDPR and EU GDPR, we are the data controller responsible for your personal information.
Contact: info@atlasautism.xyz
2. What data we collect
Data you give us directly
- Your name and email address when you book a consultation via Calendly
- Any information you share in the booking form or during sessions
- Your email address if you contact us directly
Data collected automatically
- Cookie and usage data if you accept cookies (see section 8)
- Basic technical data such as browser type and IP address via server logs
Sensitive data
Given the nature of our service, some information shared with us may relate to health conditions, neurodivergent profiles, or family circumstances. This is treated as special category data under GDPR and handled with the highest level of care. We only process this data with your explicit consent and only to the extent necessary to provide our services.
3. How we use your data
- To schedule and manage consultationsTo provide the services you've requestedTo respond to your enquiries
- To send you information related to your sessions (session notes, resources)
- To comply with our legal obligations
We do not use your data for automated decision-making, profiling, or marketing without your explicit consent.
4. Legal basis for processing
We rely on the following legal bases under UK GDPR / EU GDPR:
- Contract performance — processing necessary to deliver the services you've booked
- Legitimate interests — responding to enquiries and managing our business
- Explicit consent — for any special category data (health / neurodivergence information) and for marketing communications
- Legal obligation — where required by applicable law
5. Third parties and data processors
We use a small number of trusted third-party services to operate our business. Each acts as a data processor on our behalf:
- Calendly — appointment scheduling. Your name and email are shared with Calendly when you book. See Calendly's Privacy Policy.
- WordPress / web hosting provider — website hosting. See your hosting provider's privacy policy.
- Discord — community platform. Subject to Discord's Privacy Policy.
- Google Analytics (if enabled) — website analytics. Data is anonymised where possible.We do not sell, rent, or trade your personal data with any third parties for their own marketing purposes.
International transfers: Some of these services may transfer data outside the UK or EU. Where this occurs, we ensure appropriate safeguards are in place (such as Standard Contractual Clauses or adequacy decisions).
6. Data retention
- Consultation records: retained for 7 years from the date of the last session, in line with professional practice standards
- Email correspondence: retained for 3 years
- Calendly data: managed according to Calendly's retention policy
- Cookie data: see our Cookie Policy
When data is no longer required, it is securely deleted or anonymised.
7. Your rights
Under UK GDPR and EU GDPR, you have the following rights:
Right of access — to request a copy of the data we hold about you
Right to rectification — to ask us to correct inaccurate data
Right to erasure — to ask us to delete your data in certain circumstances
Right to restrict processing — to limit how we use your data
Right to data portability — to receive your data in a portable format
Right to object — to processing based on legitimate interests
Right to withdraw consent — at any time, where consent is the legal basis
To exercise any of these rights, email us at theatlasaurism@gmail.com. We will respond within 30 days.
If you are unhappy with how we handle your data, you have the right to lodge a complaint with:
- UK: the Information Commissioner's Office (ICO) at ico.org.uk
- Spain / EU: the Agencia Española de Protección de Datos (AEPD) at aepd.es
8. Cookies
We use cookies to make our website function properly and (with your consent) to analyse how visitors use the site. For full details, please see our Cookie Policy.
9. Children's privacy
Our services are provided to adults (parents, educators, school staff). We do not knowingly collect personal data directly from children under 13. Information about children may be shared by parents or guardians in the course of consultations — this is treated with the utmost care as special category data.
10. Changes to this policy
We may update this Privacy Policy from time to time. When we do, we will update the "last updated" date at the top of the page. For significant changes, we will notify you by email where we hold your contact details.
11. Contact us
For any privacy-related questions or requests:
Atlas Autism
Email: info@atlasautism.xyz
Website: atlasautism.xyz
Atlas Empowering schools and families to support neurodivergent young people. With two decades of hands-on experience and a trauma-responsive heart