Privacy Policy

Last updated 4 August 2026. This policy covers the Aperio Workplace Profile and this website. The ADHD, autism, and bias screeners have their own privacy policies on their own sites, because they process different data.

Who we are

Aperio Profiles is a trading name of Liberation Academy Ltd, a company registered in England and Wales (company number 16087057). We are the data controller for the personal data described in this policy and we are registered with the Information Commissioner's Office (ICO). Data protection contact: enquiries@liberationacademy.co.uk.

What we collect

When you complete a workplace profile we collect: your email address, your name if you provide it, the sex you were assigned at birth, your work arrangement, any existing diagnoses you choose to disclose, whether you opted into pattern screening, your answers to the assessment questions, and your working-style preferences. From your answers we generate your profile results, which include executive function scores, personality (OCEAN) scores, any pattern screening indicators you opted into, and a set of candidate workplace adjustments.

Technical data recorded with your consent

When you give or withdraw consent, we also record your IP address and your browser's user-agent string alongside the exact wording you were shown and the time. We keep this only as evidence that consent was properly given, which UK GDPR Article 7(1) requires us to be able to demonstrate. It is not used for tracking, profiling, or advertising.

Special category data

Your executive function scores, any neurodivergence screening results, and any existing diagnoses you share are special category health data under UK GDPR Article 9. We process them only with your explicit consent, which we ask for on a dedicated consent screen before the assessment starts and record with the exact wording you were shown. Personality scores are not special category data.

Why we process it and our lawful basis

Your answers are used to generate your profile and your results. Your email is used to deliver them. Our lawful basis is the contract with you (Article 6(1)(b)) and, for the health data described above, your explicit consent (Article 9(2)(a)). We do not use your assessment data for advertising, and we do not sell it.

If you took the assessment through your employer

If you complete the profile through your employer, part of your profile is shared with your employer's dashboard so that they can use it for team composition, pairing, and management decisions. Your employer sees your name, your email address, your job title, your personality (OCEAN) profile, and your work arrangement. Your employer does not receive the sex you were assigned at birth, your executive function scores, any neurodivergence or pattern screening results, any diagnoses you disclose, or your raw answers: those are never shared with your employer. The sex you tell us is used only to select the right version of the assessment for you. Your full results are not sent to your work email address without your say; when you finish, you choose where your results go. Specific workplace adjustments are shared with your employer only when you actively choose to share them, as written or flagged for discussion, and you can withdraw a shared adjustment at any time from your Aperio account. Screener completions are shown to employers only as organisation-wide counts, never named. In organisations where more than 50 employees have completed assessments, your employer may also see an anonymous, organisation-wide breakdown of sex distribution to help them manage workforce diversity. This is a whole-organisation statistic only. It never identifies you, and it is suppressed automatically whenever a group is small enough that an individual could be recognised. For the profile that is shared with your employer, your employer and Aperio are joint controllers under UK GDPR: Aperio decides what is collected and shown and keeps it secure, and your employer decides how it uses the shared profile within its organisation. Your employer is contractually prohibited from using it for recruitment, promotion, disciplinary, redundancy or other employment decisions. You can exercise your data protection rights against either of us, and Aperio (enquiries@liberationacademy.co.uk) is your single point of contact.

If your employer added you from an employee list

Your employer may add you to Aperio by giving us your name, work email, job role, team and manager, so they can invite you to set up your own account. This is ordinary employment information they already hold about you, and no health or other special category data is created by adding you or by inviting you. Setting up an account is voluntary. Your account is your own: you sign in with a personal email that your employer cannot read, and from it you can view your workplace profile and request an ADHD, autism or bias screener whenever you want one. Your employer can see that you have set up (activated) an account, so that they can keep track of the rollout, and they see the employment details they provided. Your employer can never see which screener you request, whether you completed one, or any result: those are private to you. When you request a screener from your account it is confidential; your employer pays for it from a shared pool but is never told who used it, and completions are only ever reported to your employer as anonymised, organisation-wide counts. We are able to show your employer that you activated an account because the account is general purpose, and is also how you reach your workplace profile results, so activation on its own does not reveal anything about your health or whether you have used a screener.

Taking part is voluntary

If your employer invited you to take an assessment, taking part is voluntary. We recognise that agreeing to something at work is not a completely free choice, so we do not rely on that alone: your employer agrees, as a condition of using Aperio, that anyone who declines to take an assessment will not be penalised or treated less favourably for it, in performance reviews, work allocation, selection, or any other decision. Your decision to take part, or not, is separate from your terms of employment.

How long we keep it

We keep each type of data only as long as we need it. Your raw answers are deleted or anonymised about 90 days after your report is produced. Your results are kept while your Aperio account is active. Access codes and session tokens are kept for up to 12 months, and audit and access logs for up to 18 months. Records we need for legal reasons, such as your consent history, any workplace adjustment shared with an employer (Equality Act evidence), and payment records (kept for HMRC), are retained for up to 6 years. When a retention period ends we delete or anonymise the data. The shorter-lived deletions, including your raw answers, run automatically each day and are logged.

Who processes it for us

Data is stored with Supabase in the UK region (AWS London) with row-level security locked to server-side access only. Payments are processed by Stripe; we never see or store card details. Emails are sent via Resend. The site runs on Vercel. Each provider processes data under a data processing agreement. Where a provider processes data outside the UK (Stripe and Resend in the US; Vercel edge functions may execute outside the UK), the transfer is safeguarded by the UK Addendum to the EU Standard Contractual Clauses or the UK IDTA.

Your rights

You can exercise most of your rights yourself from your Aperio account: view the data we hold about you, download a copy (access and portability), manage or withdraw anything you have shared with an employer, and request erasure. Erasure requests are actioned within one calendar month; where the law requires us to retain something (for example, evidence of workplace adjustments under the Equality Act 2010), we will tell you what is retained and why. For rectification or anything else, email enquiries@liberationacademy.co.uk. You also have the right to complain to the ICO at ico.org.uk.

Cookies

See our cookie policy. Non-essential cookies run only if you opt in, and you can change your choice at any time from the cookie preferences link in the footer.

Contact

Data controller: Liberation Academy Ltd, trading as Aperio Profiles, registered in England and Wales (company number 16087057). Email: enquiries@liberationacademy.co.uk. General enquiries: hello@aperioprofiles.co.uk.