Privacy Policy: Autism Screener

Aperio Profiles is a trading name of Liberation Academy Ltd, a company registered in England and Wales (company number 16087057) and registered with the Information Commissioner's Office (ICO), registration reference ZB819301. We are the data controller for the personal data described in this policy. Contact: enquiries@liberationacademy.co.uk.

When you complete the Autism screener, we collect:

Your email address and, optionally, your name, used to send you your results.

The sex you were assigned at birth: the screener is sex-differentiated, so this determines which version of the questionnaire you receive.

Any existing diagnoses you choose to disclose (optional), used to contextualise your results, never required to proceed.

Your responses to the screening items, and the score, domain breakdown, and pattern indicators computed from them.

When you give or withdraw consent, we also record your IP address and your browser's user-agent string alongside the exact wording you were shown and the time. We keep this only as evidence that consent was properly given, which UK GDPR Article 7(1) requires us to be able to demonstrate. It is not used for tracking, profiling, or advertising.

Your screening responses, and any existing diagnoses you disclose, are special category (health) data under Article 9 UK GDPR. We process this only on the basis of your explicit consent under Article 9(2)(a), given via the consent screen before the screener begins. You can decline consent and no screening data is collected.

Our lawful basis under Article 6 is contract performance (Article 6(1)(b)) where you buy an access code yourself, and your consent (Article 6(1)(a)) where an organisation provides the code. Taking the screener is voluntary and confidential, and you can withdraw your consent at any time.

Your overall pattern and score are computed on our server directly from your submitted responses, using a fixed, published scoring method, not left to a value your browser sends us. This is a screening instrument, not a diagnosis, and does not make any automated decision about you with legal or similarly significant effect.

Your results are sent only to the email address you provide. We do not share your individual results with employers, third parties, or advertisers.

If you completed the screener using an access code issued by your employer, your employer does not see your individual result, and does not see that you personally took part. They see only anonymous, aggregate figures across everyone who took part (for example, how many people completed a screener and how many scored in the high range), never your score, level, or any individual answer, and never linked to your name, unless you explicitly choose to share something with them elsewhere in our products.

Your data is stored in Supabase, hosted in the UK (AWS London), with row-level access controls. We use the following processors, each under a data processing agreement:

Supabase (database), Vercel (hosting), Resend (email delivery), and Stripe (payment processing, if you purchased directly). We do not store your payment card details.

Vercel, Resend, and Stripe process some data on US infrastructure. This is covered by their data processing agreements with us, incorporating the UK Addendum to the EU Standard Contractual Clauses as the transfer safeguard.

We keep each type of data only as long as we need it. Your raw answers are deleted or anonymised about 90 days after your report is produced, and your results are kept while your Aperio account is active. If you do not have an Aperio account, your results are deleted 24 months after your last activity.

Access codes and session tokens are kept for up to 12 months. Consent records are kept for up to 6 years, because the law requires us to be able to demonstrate the consent you gave. When a retention period ends we delete or anonymise the data; the shorter-lived deletions run automatically each day and are logged.

Under UK GDPR you have the right to access, correct, erase, or export your data, to restrict or object to our processing, and to withdraw consent at any time (withdrawal does not affect processing already carried out). To exercise these rights, use your account or email enquiries@liberationacademy.co.uk.

You also have the right to complain to the ICO (ico.org.uk) if you believe we have not handled your data lawfully.

This screener is for adults. You must confirm you are 18 or older before you can begin.

We use cookies for essential site function and, with your consent, analytics. See our Cookie Policy for details and how to change your preferences.

Data controller: Liberation Academy Ltd, trading as Aperio Profiles. Email: enquiries@liberationacademy.co.uk