Privacy
Before launch: complete the bracketed details and have this notice reviewed by a qualified professional.
The short version
- Your self-screening answers never leave your browser. We can't see them.
- If you write to us, we use your message only to reply.
- Analytics run only if you allow them, and never include your screening answers.
Who is responsible
DopaFix is operated by Lyllak [legal entity name, registered address, company number]. Privacy questions: [privacy email address].
The self-screening
The screening runs entirely in your browser. While you answer, your responses are kept in your browser's session storage so a refresh doesn't lose your place. They are deleted when you close the tab, or straight away if you choose "Clear my answers". They are never sent to us, stored on our servers or shared with analytics. Answers about ADHD-related experiences can be sensitive, which is why we designed it this way.
Contact form
Your name, email, topic and message, used only to reply. Legal basis: our legitimate interest in answering you. We keep messages as long as needed to deal with your enquiry, then delete them [retention period, e.g. 12 months]. Please don't send health details you'd rather keep private.
To stop spam, we count messages sent from one connection using a one-way hashed form of your IP address, kept for up to one hour.
Analytics — only with your permission
If you choose "Allow analytics", Google Analytics 4 measures which pages are visited and which buttons are used (for example, that a screening was started or finished). It never receives your answers or results. If you choose "Necessary only", it never loads. You can change your choice under "Cookie settings" at the bottom of every page. Legal basis: consent.
Links to Amazon
Books are sold on Amazon. When you follow a book link, Amazon's own privacy notice applies there.
Who processes data for us
Our hosting provider [Hostinger — confirm entity] hosts the site and keeps standard server logs. Google [Google Ireland Ltd.] processes analytics data only if you allow it. We don't sell personal data and we don't use advertising trackers.
Your rights
Under the GDPR you can ask for access, correction, deletion, restriction or portability of your data, object to processing, and withdraw consent at any time. You can also complain to your data protection authority [name the lead authority]. Write to [privacy email address].