Privacy & cookies

Who is the data controller?

RMSS Clinical Limited is the data controller for personal data processed via NeuroCompare. We are a company registered in England and Wales under company number 16808208, with registered office at 58 Eskdale Avenue, Chesham, Buckinghamshire HP5 3AY, trading as NeuroCompare.

ICO data-controller registration: ZC228906.

Short version

• You can use the whole comparison and matcher without giving us any personal details.
• Your matcher answers are saved in your browser so the form remembers them. When you ask for matches, they're sent to our AI matcher to generate suggestions.
• If — and only if — you ask us to email your results/summary, or opt in to updates, we collect and store your name and email so we can send them.
• We never sell your data, and payment never affects how providers are ranked.
• A few essential cookies and privacy-friendly analytics. No advertising cookies, no cross-site tracking.

What we collect

Matcher answers

Postcode prefix, age range, budget, format preference, NHS shared-care preference, priorities and your free-text notes. Stored locally to prefill the form next time. Sent to our AI service when you request matches.

Contact details (only if you give them)

Your name and email address, if you ask us to email your matches/summary or you opt in to updates. Stored in our secure database so we can send what you asked for.

Health-related information

The condition you're seeking assessment for (e.g. ADHD, autism) tells us something about your health, which is a "special category" of data under UK GDPR. We rely on your explicit consent — given by choosing to use the matcher — to process it, and we keep it to the minimum needed to help you compare providers.

Outbound clicks

When you click through to a provider, we record the provider ID, surface (card, matcher, etc.) and timestamp. This is anonymous — no IP address, no device fingerprint, no cookies tied to it.

Provider enquiries

If you choose to contact a provider through us, we pass on the details you ask us to pass on so they can respond; from that point the provider handles that information under its own privacy policy.

Aggregate analytics

Page views and basic device type, with no personal identifiers. Used to know which comparisons are useful.

Marketing

We only send marketing updates if you actively opt in (the box is never pre-ticked). Asking us to email your results does NOT sign you up to marketing. Every marketing email has a one-click unsubscribe, and you can opt out at any time.

Who we share data with (our processors)

• Supabase — secure database & hosting, data in the EU/Ireland.
• Lovable and Google — the AI that powers the matcher; your matcher answers are processed to generate suggestions.
• Brevo — to send your results and any updates you've opted into.
• Google Analytics — aggregate usage only. We do not sell your data, and none of this is used for advertising.

Some AI processing may occur outside the UK/EEA under appropriate safeguards (e.g. Standard Contractual Clauses / the UK Addendum).

Cookies

• Essential — site functionality only (e.g. remembering your matcher answers).
• Analytics — privacy-first, aggregated, no personal identifiers.
• Advertising / tracking — none.

Your rights (UK GDPR)

Under the UK GDPR you have the right to: be informed; access your personal data; rectify inaccurate data; erase data ("right to be forgotten"); restrict processing; data portability; object to processing; and not be subject to automated decision-making with legal effect.

You can clear your stored matcher answers at any time by clearing your browser data for this site. To exercise any UK GDPR right, email privacy@neurocompare.com. We aim to respond within one calendar month.

If you are unhappy with how we handle your data, you can complain to the UK Information Commissioner's Office at ico.org.uk/make-a-complaint or by calling 0303 123 1113.

How long we keep data

• Matcher answers — kept in your browser only, until you clear them. Sent to our AI service for the duration of generating your matches and not retained on our servers afterwards.
• Email & saved results — kept while your request/subscription is active; removed on unsubscribe or on request.
• Outbound clicks — anonymous; aggregated and retained for up to 24 months for analytics.
• Server & security logs — kept for up to 30 days for abuse prevention, then deleted.
• Provider correction emails — kept for up to 6 years to demonstrate compliance with our editorial and takedown procedures.

FAQ suggestions

On our FAQ page you can suggest a question you'd like us to answer. We collect only the free text you type. We ask you not to include your name, contact details, or any information about your own health or diagnosis, and we do not ask for or store your email, name, or IP address with your suggestion. Our lawful basis is our legitimate interests (Article 6(1)(f) UK GDPR) in deciding what to explain on our site. We do not seek special-category (health) data through this box; if such information appears despite our request, we delete it promptly on review. Suggestions are private, are read only by our team, are never shown to other visitors, and are never published automatically. Because we store them without any identifier, we cannot link a suggestion back to an individual; the safeguards are our request to keep it general, prompt deletion of anything identifying, and short retention. We keep suggestions for up to 6 months, and delete them sooner once we have actioned them. This box is not a channel for medical advice — if you need help now, talk to your GP, call NHS 111, or call 999 in an emergency.