Lived.

Privacy Policy

Last updated: May 2026

This policy is under legal review and will be finalised before public launch. If you have questions in the meantime, email hello@joinlived.co.uk.

1. Who we are

Lived. is operated by [Company legal name] (Company No. [XXXXXXXX]), registered in England and Wales. Our registered address is [address].

We are the data controller for personal information you provide when using joinlived.co.uk. Contact us at hello@joinlived.co.uk with any data-related questions.

2. What data we collect and why

We collect only the data we need to run the platform. Here is what we hold and the legal basis for each:

Account and profile data

Name, email address, account type (consumer or consultant), and account creation date.

Legal basis: Contract (Article 6(1)(b) UK GDPR) — necessary to provide the service.

Neurodivergence information Special category data

Information about your neurodivergent condition(s) (e.g. ADHD, autism, dyslexia, AuDHD) that you share during the intake questionnaire. This is used solely to match you with a consultant who shares relevant lived experience.

Legal basis: Explicit consent (Article 9(2)(a) UK GDPR). You give this consent at the point of completing the intake form. You may withdraw consent at any time by deleting your account.

Intake responses

Your answers to the matching questionnaire, including support goals, preferences, and availability.

Legal basis: Contract — necessary to deliver a matched consultation.

Booking and payment data

Session bookings, dates, and payment records. Card details are processed and stored by Stripe — we never see or store your full card number.

Legal basis: Contract and Legal obligation (tax records).

Usage and analytics data

Pages visited, features used, and general platform behaviour — collected only if you accept analytics cookies. Collected via PostHog (EU-hosted at eu.posthog.com).

Legal basis: Consent (PECR / UK GDPR Article 6(1)(a)).

Audit log

A record of significant actions on your account (e.g. consent given, data exported, account deleted). Retained for compliance purposes.

Legal basis: Legal obligation and Legitimate interests (security and fraud prevention).

3. Who we share your data with

We do not sell your data. We share it only with the services that power the platform:

  • Supabase — database and authentication, hosted in the EU (Frankfurt). Privacy policy
  • Stripe — payment processing. Card data never touches our servers. Privacy policy
  • Resend — transactional email (booking confirmations, match notifications). Privacy policy
  • Cal.com — session scheduling embedded on booking pages. Privacy policy
  • PostHog — product analytics, EU-hosted, only if you accept analytics cookies. Privacy policy
  • Claude / Anthropic — AI data processing services used for platform assistance and automation. They act as data processors and process information only under our instruction. Privacy policy
  • Sentry — error monitoring (may capture anonymised technical data if errors occur). Privacy policy
  • Your matched consultant — once a match is made and a session is booked, your first name, session goals, and booking details are shared with your consultant to enable the session.

All third-party processors are bound by data processing agreements and handle data in accordance with UK GDPR.

4. International data transfers

We store data within the UK and EU. Where processors are based outside the UK/EU (e.g. Stripe, Sentry), transfers are covered by the UK International Data Transfer Agreement (IDTA) or EU Standard Contractual Clauses, ensuring your data receives equivalent protection.

5. How long we keep your data

  • Your account data is kept for as long as your account is active.
  • If you delete your account, your personal data is removed within 30 days. Anonymised booking records may be retained for up to 7 years for legal/tax purposes.
  • Audit log entries are retained for 3 years.
  • Analytics data (if consented) follows PostHog's retention settings (90 days by default on our plan).

6. Your rights

Under UK GDPR you have the right to:

  • Access — download everything we hold about you at Account → Download my data
  • Portability — receive your data in a machine-readable format (the above download is a JSON file)
  • Erasure — delete your account and all associated data at Account → Delete my account
  • Rectification — correct inaccurate data by contacting us
  • Restriction — ask us to pause processing in certain circumstances
  • Object — object to processing based on legitimate interests
  • Withdraw consent — for special category data, withdraw consent by deleting your account; for analytics, change your cookie preference at any time

To exercise any right, email hello@joinlived.co.uk. We will respond within one calendar month.

7. Cookies

We use two types of cookies:

  • Essential cookies — keep you signed in and make the platform work. These cannot be disabled.
  • Analytics cookies — help us understand how the platform is used (PostHog). These are only set if you accept analytics cookies via the banner.

You can change your cookie preference at any time from the footer using Cookie settings, or by clearing your browser storage or contacting us.

8. Children

Lived. is intended for users aged 18 and over. We do not knowingly collect data from anyone under 18. If you believe a child has provided us with personal data, please contact us immediately.

9. Changes to this policy

We may update this policy as the platform evolves. Significant changes will be notified by email. The "Last updated" date at the top of this page reflects the most recent version.

10. Complaints

If you are unhappy with how we handle your data, please contact us first at hello@joinlived.co.uk. If we cannot resolve your concern, you have the right to lodge a complaint with the UK Information Commissioner's Office (ICO):

ico.org.uk/make-a-complaint — 0303 123 1113