Privacy notice
Who is responsible
ADHD Pathways is operated by Zack Stempler, at Hornstraat 41, 5045 BA Tilburg, Netherlands. It is not yet registered as a business in the Netherlands. Zack Stempler decides what happens to your information and is responsible for it (the “controller” in data protection law).
For anything in this notice, including a request to see or delete your information, email info@adhdpathways.net.
What we collect, and why
If you sign up for email
We store your email address, which part of the site you signed up from and the version of this notice shown to you. When we email you, we record whether and when you open a message, and which links you click, to see which emails are useful. We send only what you asked for: a short welcome series and occasional updates, about once a week at most. We do this because you asked us to (your consent), and you can withdraw it with one click in any email.
If you join the community
We store a display name you choose (it does not have to be your real name), your email address and anything you post. Posts are held until they are approved and are then public. Your account is the same one used by the PathDock app, so signing in works across both. We hold this to run your account and the forum you joined (our agreement with you).
If you choose Continue with Google, Google tells us your name, your email address, and that Google has confirmed the address is yours. Google also sends a link to your profile picture: this site does not show or use it, but it is kept with your account record. We never see your Google password, and signing in this way gives us no access to your Google account, your email or your calendar.
If you use the chat
We store your messages, the page you wrote from and, if you give them, your name and email address, so the conversation can continue and an answer can reach you. Your browser keeps a random key so that only you can reopen the conversation. Answers are written by an AI assistant, and a person takes over when needed. We use this to answer you (our legitimate interest in answering the people who write to us, and, for an order, our agreement with you).
If you book a session
We store your first name, your email address, your time zone and the time you booked, and we put the session in our own calendar. Sessions are paid, so a booking also creates an order (see below). We need this to hold the session with you (our agreement with you).
If you buy something
Purchases are possible only when the store is open. When you buy, we keep an order: what you bought, the amount, your email address and its status. Stripe handles the payment itself; we never see or store your card details. We keep orders to deliver what you bought (our agreement with you) and because Dutch tax law requires us to keep business records for seven years.
What we note about people we deal with
To answer you well over time, we keep a simple record per email address: your signups, orders, bookings and chats in one place, and short internal notes such as “asked about a refund”. It is never shared and never used for advertising (our legitimate interest in giving consistent help).
Information about your health
We do not ask for medical information. But this is a site about ADHD, so what you write in the community or the chat may say something about your health, which the law treats as especially sensitive. We process it only because you chose to share it and agreed to this when you joined (your explicit consent), and only to show your posts and answer you. Please share only what you are comfortable having read. You can withdraw that consent at any time by asking us to delete your posts or messages.
Things we do not do
- ask for your telephone number, home address, or date of birth;
- record your IP address or build a profile of you;
- use advertising tracking, or any analytics that follows you across visits or across other websites;
- set advertising or tracking cookies of any kind;
- sell your information or share it for advertising;
- let an AI make a decision about you without a person checking it.
You can read this site without giving us anything.
AI tools
We use AI service providers to help us read and answer messages. They process the text only to provide that service, and we have switched off any setting that would let them use it to train their models. If you would rather no AI read your message, email info@adhdpathways.net with “No AI” at the start of the subject line, and a person will read and answer it.
Counting visits
To know which pages are useful, we count page views with Vercel Web Analytics. It uses no cookies and stores no IP address. For each page view it records the page, the site you came from, and your country, browser and type of device, worked out at the moment of the visit. Visitors are told apart only within a single day, using a value that is discarded after 24 hours, so a visit today cannot be linked to a visit tomorrow and no one can be identified from it.
Cookies and your browser’s storage
Cookies are only set for people who sign in, whether to administer the site or to take part in the community. They keep you signed in and do nothing else. The chat keeps its conversation key in your browser, and the store keeps your basket there, only so those work; nothing in them follows you elsewhere. A visitor who does not sign in is set no cookies, so there is no cookie banner to click.
Who helps us
These suppliers process information on our instructions, only to provide their service:
- Vercel (United States): hosting, file storage (Vercel Blob) and visit counting. Like any web host, Vercel keeps short-term server logs that include IP addresses; we do not read them to build a picture of anyone.
- Neon: the site’s database.
- Supabase (data held in Frankfurt, Germany): community accounts and sign-in, shared with the PathDock app.
- Google: confirms who you are if you choose Continue with Google, and holds our calendar for booked sessions. What Google records about your sign-in is governed by Google’s own privacy policy.
- Resend (United States): sends our email.
- AI service providers (mostly in the United States): help us read and answer messages, as described above.
- Stripe: payments, when the store is open.
Some of these suppliers are in the United States. Where information leaves the European Economic Area, it is protected by the EU–U.S. Data Privacy Framework or by the European Commission’s Standard Contractual Clauses, as each supplier provides.
How long we keep it
- Your email address and its open and click records: until you unsubscribe and ask us to remove it, or until it is clear we will not use it.
- Your community account and posts: until you ask us to delete them. Because the account is shared with PathDock, deleting it ends your sign-in to both.
- Chat conversations and our notes about you: until you ask us to delete them.
- Orders and paid bookings: seven years, because Dutch tax law requires it.
- Records of who administers the site and changes to their permissions: as long as the site runs.
There is no automatic deletion schedule for the first three yet, so we are not promising you one; we delete on request, quickly.
Your rights
Email info@adhdpathways.net and we will, without asking you to justify yourself:
- tell you what we hold about you and give you a copy;
- correct it if it is wrong;
- delete it (except orders we must keep for tax);
- stop or limit using it, including if you object to how we use it;
- give it to you in a form you can take elsewhere;
- withdraw any consent you gave, without affecting what was done before.
We answer within a month. If you think we have handled your information badly, you can complain to the Dutch data protection authority, the Autoriteit Persoonsgegevens, or to the authority where you live.
Age
This site is meant for adults. The community and the chat are for people aged 16 or over. We do not knowingly collect information from children, and we have no way of knowing a visitor’s age other than being told.
Other sites
Our Guides link to outside sources such as research papers and health guidance. Those sites have their own privacy practices, which we do not control.
Changes
This notice changes as the site does. The version number above changes with it. If a change affects what we do with information you have already given us, we will ask you again rather than assume.