This is the privacy notice for the Discovery Programme website (discover.thrivingautistic.org), operated by Thriving Autistic CLG. In this document, “we”, “our”, or “us” refer to Thriving Autistic CLG.

We are a non-profit social enterprise, dedicated to supporting, promoting and advancing the human rights of Autistic and neurodivergent people. We are registered in Ireland, company number 695770.

We are based in Ireland, Europe.

What this notice covers

This notice explains how we collect, use, store and protect personal information when you use the Discovery Programme website.

We wrote it in plain English so that it is easy to understand.

The Discovery Programme is our six-week cohort-based resource hub for recently identified Autistic adults. This privacy notice applies specifically to this site.

For information about how Thriving Autistic CLG handles data across all of our services, please see our main privacy notice.

Our approach to accessibility and AI

As a neurodivergent-run organisation, we believe disabled people have the right to use the tools that support their communication and processing.

Some of our team use AI as an accessibility aid.

We do not enter identifying personal data about the people we support into these tools, and we follow GDPR at all times to protect your information.

What information we collect

The information we collect depends on how you interact with this site. This may include:

• your name and contact details when you register for a cohort
• information you provide through sign-up or registration forms
• your email address if you subscribe to updates
• records of emails or messages you send us
• information about how you use this site (if analytics are enabled in future)

Cohort registration may take place through third-party platforms such as Eventbrite, Typeform, Google Forms, or ActiveCampaign. When you register through these platforms, their own privacy policies also apply.

We encourage you to review those policies when signing up.

If you need support in understanding anything or have further questions, please contact us.

What we do not do

We do not:

• sell your data
• share your data for marketing purposes
• track you across the internet
• enter identifying personal data into AI tools
• use your information for advertising or profiling

Cookies

This site uses a small number of cookies to help the site function properly. These may include:

• Essential cookies — required for the site to work (e.g., session management, cookie consent preferences)
• Analytics cookies — if analytics are enabled in future, these would help us understand how the site is used. We will update this notice before enabling any analytics tracking.

You can manage your cookie preferences through the cookie notice that appears when you first visit the site.

You can also adjust your cookie settings in your browser at any time.

Why we collect information (legal bases)

Under GDPR we need a lawful reason to process personal data. We use:

1. Contract

To provide services you have requested, such as enrolling you in a Discovery Programme cohort, giving you access to programme resources, and sending you information related to your participation.

2. Consent

When you freely choose to give information or sign up for email updates. You can withdraw consent at any time.

3. Legitimate interest

For things that help our organisation function safely and responsibly, such as record-keeping, replying to messages you send us, improving our services, and safeguarding where necessary.

4. Legal obligation

To meet legal or financial requirements, such as tax or safeguarding laws.

How we use your information

We use the information you give us to:

• enrol you in Discovery Programme cohorts
• give you access to programme resources and materials
• respond to your questions
• send you updates you have opted into
• keep necessary organisational records
• ensure safety and safeguarding where required

Third-party services

We use a number of third-party platforms to deliver the Discovery Programme. These may include:

• Eventbrite — for cohort registration and event management
• Typeform — for registration and feedback forms
• Google Forms — for registration and feedback forms
• ActiveCampaign — for email communications and updates
• YouTube — for embedded animation videos on this site

These platforms have their own privacy policies. When you interact with them, their terms apply alongside ours. We choose services that offer appropriate data protection safeguards.

The specific platforms we use may change over time. We will keep this notice up to date to reflect any changes.

Who can access your information

Your data is only shared when necessary with:

• members of our team who need it to deliver the programme
• secure third-party tools we use to run our services (such as email platforms, encrypted storage, scheduling tools)
• legal authorities if required by law

We do not share personal information with external companies for marketing or profit.

Where your data is stored

Our systems are hosted securely in Ireland or the EU where possible. If another country is involved (for example, where a secure tool hosts data), we make sure GDPR-level safeguards are in place.

How long we keep information

We keep data only for as long as needed to:

• provide the services you requested
• meet legal or tax requirements
• ensure safeguarding
• resolve any potential issues or disputes

After that, we securely delete it.

Your rights

You can ask us to:

• access the information we hold about you
• correct or update your information
• delete your information (in most cases)
• withdraw consent
• request a copy of your data
• object to certain types of processing

Contact us at hello@thrivingautistic.org for any of these requests. We will need to verify your identity before making changes.

How we keep information safe

We use encryption, secure servers, access controls, GDPR-compliant systems, and regular reviews of data protection processes to keep your information safe.

If you have a concern

Please contact us at hello@thrivingautistic.org.

If you are unhappy with how we handle your data, you can contact the Data Protection Commission in Ireland

Updates to this notice

We review this privacy notice regularly and update it when necessary.

The version on this website will always be the most recent.

Last updated: February 2026