Privacy notice

Who we are

Vianova is a directory of autism services and support across the UK. We are the data controller for the personal information described here. You can contact us about privacy at info@vianovacic.com or through our contact form.

You can use Vianova without an account

Searching, browsing listings and reading guides do not require an account, and we do not ask who you are. Accounts exist only for Vianova staff who manage listings.

What we collect and why

When you search

We use the words and location you type to find services. To turn a postcode or place name into a map position we send it to postcodes.io, and to find additional nearby services we may send your search terms and that position to the Google Places API. These lookups are made by our server, so your IP address is not passed to either service. We keep a cache of the results (not linked to you) so that repeat searches do not need to be sent again.

When you send an enquiry to a provider

Your name, email address, optional phone number and message are emailed to the provider you choose so they can reply to you directly. We do not store your message. We keep a short record of who sent an enquiry, to which provider and when, so we can deal with misuse. We email you a copy to confirm it was sent. Once the provider has your enquiry, they handle it under their own privacy policy.

When you report a listing or contact us

We keep the details you give us in a report, and your email address if you choose to add one so we can follow up. Messages sent through our contact form are emailed to our team and are not stored in our database.

When a provider asks to be listed or to update a listing

We keep the contact name, email address, role and details supplied so that we can check and process the request.

Staff accounts

For staff we hold a name, email address, role and sign-in records, and an audit log of changes made to listings.

Our legal basis

We rely on our legitimate interests in running a reliable, safe directory for search, reports, listing requests, abuse prevention and security. For enquiries we act on your request to send your message to a provider, which you confirm before sending.

Cookies and analytics

Vianova does not use advertising or tracking cookies, and we do not use third-party analytics. The only cookies we set are strictly necessary ones that keep staff signed in. We count page views and clicks on provider listings as daily totals, without cookies or personal identifiers, so we can show providers how their listing is used.

To protect our forms from abuse we keep a short-lived counter keyed by a scrambled (salted and hashed) version of your IP address. It cannot be turned back into your IP address and is used only to limit repeated submissions.

Who we share information with

• The provider you choose, when you send an enquiry.
• Our hosting and database providers (Vercel and Supabase) and our email delivery provider, who process data on our behalf.
• postcodes.io and Google, for location and place lookups as described above.
• Anyone we are legally required to share information with.

We do not sell personal information. Our database is hosted in the United Kingdom. Where a service provider processes data outside the UK, it does so under safeguards recognised by UK data protection law.

How long we keep information

• Enquiry records: 12 months.
• Reports and listing requests: 24 months after they were made.
• Contact form emails: 24 months.
• Abuse-prevention counters: no longer than 2 days.
• Staff accounts: while the person works with us, and audit logs for 6 years.

Your rights

Under UK data protection law you can ask for a copy of your information, ask us to correct or delete it, object to how we use it, or ask us to restrict its use. Contact us at info@vianovacic.com. We will reply within one month.

If you are unhappy with how we have handled your information, you can complain to the Information Commissioner's Office at ico.org.uk/make-a-complaint or on 0303 123 1113.

Information about providers

Listings contain business contact details that organisations publish themselves or that appear in public registers, such as the Care Quality Commission and the Charity Commission registers. If you represent a provider and want a listing corrected or removed, ask us to update it.

Changes to this notice

We will update this page if how we use personal information changes, and change the date at the top.