Privacy Policy

Last updated 21 September 2026. This policy covers the Aperio Workplace Profile and this website. The ADHD, autism, and bias screeners have their own privacy policies on their own sites, because they process different data.

Who we are

Aperio Profiles is a trading name of Liberation Academy Ltd, a company registered in England and Wales (company number 16087057). We are the data controller for the personal data described in this policy and we are registered with the Information Commissioner's Office (ICO), registration reference ZB819301. Data protection contact: enquiries@liberationacademy.co.uk.

What we collect

When you complete a workplace profile we collect: your email address, your name if you provide it, the sex you were assigned at birth, your work arrangement, any existing diagnoses you choose to disclose, whether you opted into pattern screening, your answers to the assessment questions, and your working-style preferences. From your answers we generate your profile results, which include executive function scores, personality (OCEAN) scores, any pattern screening indicators you opted into, and a set of candidate workplace adjustments.

Technical data recorded with your consent

When you give or withdraw consent, we also record your IP address and your browser's user-agent string alongside the exact wording you were shown and the time. We keep this only as evidence that consent was properly given, which UK GDPR Article 7(1) requires us to be able to demonstrate. It is not used for tracking, profiling, or advertising.

Special category data

Your executive function scores, any neurodivergence screening results, and any existing diagnoses you share are special category health data under UK GDPR Article 9. We process them only with your explicit consent, which we ask for on a dedicated consent screen before the assessment starts and record with the exact wording you were shown. Personality scores are not special category data.

Why we process it and our lawful basis

Your answers are used to generate your profile and your results. Your email is used to deliver them. Our lawful basis is the contract with you (Article 6(1)(b)) and, for the health data described above, your explicit consent (Article 9(2)(a)). We do not use your assessment data for advertising, and we do not sell it.

If you took the assessment through your employer

If you complete the profile through your employer, part of your profile is shared with your employer's dashboard so that they can use it for team composition, pairing, and management decisions. Your employer sees your name, your email address, your job title, your personality (OCEAN) profile, and your work arrangement. Your employer does not receive the sex you were assigned at birth, your executive function scores, any neurodivergence or pattern screening results, any diagnoses you disclose, or your raw answers: those are never shared with your employer. The sex you tell us is used only to select the right version of the assessment for you. Your full results are not sent to your work email address without your say; when you finish, you choose where your results go. Specific workplace adjustments are shared with your employer only when you actively choose to share them, as written or flagged for discussion, and you can withdraw a shared adjustment at any time from your Aperio account. When you share an adjustment you can also choose to tell your employer which area it relates to (ADHD, autism, dyslexia, dyspraxia or other). That is a separate, explicit choice. No score or result is attached to it, and you can withdraw it at any time from your account. Screener use is shown to employers only as anonymous, organisation-wide figures: how many people completed a screener and how many scored in the high range. These are never named, and they are hidden unless the group is large enough that nobody could be identified. If your workplace profile suggests possible ADHD or autistic traits, you are offered a screener, either using one of your employer's codes or by buying one yourself. Both are anonymous. If you use an employer code, your employer approves the request first: it is told that someone has requested a screener and which kind, but not who asked, and it never sees your result. If you buy one yourself, your employer has no involvement at all. In organisations where more than 50 employees have completed assessments, your employer may also see an anonymous, organisation-wide breakdown of sex distribution to help them manage workforce diversity. This is a whole-organisation statistic only. It never identifies you, and it is suppressed automatically whenever a group is small enough that an individual could be recognised. For the profile that is shared with your employer, your employer and Aperio are joint controllers under UK GDPR: Aperio decides what is collected and shown and keeps it secure, and your employer decides how it uses the shared profile within its organisation. Your employer is contractually prohibited from using your profile to make recruitment, promotion, disciplinary, redundancy or other employment decisions about you, and from using Aperio to assess job candidates. It may use the overall balance of working styles across a team when it plans what a new role needs. You can exercise your data protection rights against either of us, and Aperio (enquiries@liberationacademy.co.uk) is your single point of contact.

If your employer added you from an employee list

Your employer may add you to Aperio by giving us your name, work email, job role, team and manager, so they can invite you to set up your own account. This is ordinary employment information they already hold about you, and no health or other special category data is created by adding you or by inviting you. Setting up an account is voluntary. Your account is your own: you sign in with a personal email that your employer cannot read, and from it you can view your workplace profile and request an ADHD, autism or bias screener whenever you want one. Your employer can see that you have set up (activated) an account, so that they can keep track of the rollout, and they see the employment details they provided. Your employer can never see which screener you request, whether you completed one, or any result: those are private to you. When you request a screener from your account it is confidential; your employer pays for it from a shared pool but is never told who used it, and screener use is only ever reported to your employer as anonymised, organisation-wide figures (how many people completed a screener and how many scored in the high range). We are able to show your employer that you activated an account because the account is general purpose, and is also how you reach your workplace profile results, so activation on its own does not reveal anything about your health or whether you have used a screener.

Taking part is voluntary

If your employer invited you to take an assessment, taking part is voluntary. We recognise that agreeing to something at work is not a completely free choice, so we do not rely on that alone: your employer agrees, as a condition of using Aperio, that anyone who declines to take an assessment will not be penalised or treated less favourably for it, in performance reviews, work allocation, selection, or any other decision. Your decision to take part, or not, is separate from your terms of employment.

How long we keep it

We keep each type of data only as long as we need it. Your raw answers are deleted or anonymised about 90 days after your report is produced. Your results are kept while your Aperio account is active. If you do not have an Aperio account, your results are deleted 24 months after your last activity. Access codes and session tokens are kept for up to 12 months, and audit and access logs for up to 18 months. Records we need for legal reasons, such as your consent history, any workplace adjustment shared with an employer (Equality Act evidence), and payment records (kept for HMRC), are retained for up to 6 years. When a retention period ends we delete or anonymise the data. The shorter-lived deletions, including your raw answers, run automatically each day and are logged.

Who processes it for us

Data is stored with Supabase in the UK region (AWS London) with row-level security locked to server-side access only. Payments are processed by Stripe; we never see or store card details. Emails are sent via Resend. The site runs on Vercel. Each provider processes data under a data processing agreement. Where a provider processes data outside the UK (Stripe and Resend in the US; Vercel edge functions may execute outside the UK), the transfer is safeguarded by the UK Addendum to the EU Standard Contractual Clauses or the UK IDTA.

Analytics, advertising and our mailing list

If you opt in through the cookie banner, we use Google Analytics and Vercel Analytics to understand how the site is used, and the Meta Pixel to measure whether visits and purchases came from our advertising. None of these load unless you opt in, and you can change your choice at any time from the cookie preferences link in the footer. Our lawful basis is your consent (Article 6(1)(a)). If you join our mailing list, we hold your email address, and your first name if you give it, in our own email marketing system (FluentCRM, run on the Liberation Academy website) on the basis of your consent, and you can unsubscribe at any time. If you book a call with us, the booking is handled by TidyCal.

Your rights

You can exercise most of your rights yourself from your Aperio account: view the data we hold about you, download a copy (access and portability), manage or withdraw anything you have shared with an employer, and request erasure. Erasure requests are actioned within one calendar month; where the law requires us to retain something (for example, evidence of workplace adjustments under the Equality Act 2010), we will tell you what is retained and why. For rectification or anything else, email enquiries@liberationacademy.co.uk. You also have the right to complain to the ICO at ico.org.uk.

Cookies

See our cookie policy. Non-essential cookies run only if you opt in, and you can change your choice at any time from the cookie preferences link in the footer.

Contact

Data controller: Liberation Academy Ltd, trading as Aperio Profiles, registered in England and Wales (company number 16087057). Email: enquiries@liberationacademy.co.uk. General enquiries: hello@aperioprofiles.co.uk.