Privacy Notice
Learn how we look after your data, written for both adults and children.
Parent & Carer Privacy Notice
Last updated: 07 July 2026. UK GDPR & DPA 2018 Compliant.
1. Who We Are
Thulir is a clinical and therapeutic platform providing specialist support for children on the Autism Spectrum. We operate under UK data residency laws. All video sessions, message history, and child profiles are stored inside secure UK-region data servers (S3 eu-west-2).
2. What Data We Process
- Guardian Account Details: Email address, name, login credentials, and session booking history.
- Child Needs Profile: First name, date of birth, communication preferences, and sensory triggers. We do not store diagnostic records unless voluntarily provided.
- Clinical Notes & Messages: Private message logs (encrypted at rest) and notes typed by therapists.
- Video Recording: Recorded therapy calls (stored encrypted, requiring time-limited signed URLs and subject to strict consent settings).
3. Safe Retention & Security
Video sessions are retained for 12 months before review, unless deleted earlier by guardian request. All clinical data access is strictly recorded in a tamper-proof audit log. Admin access requires a logged safeguarding reason.
How We Keep Your Stuff Safe! (For Kids)
A Safe Locked Box
We lock your notes in a secure digital vault so only you, your parents, and your therapist can see them.
Recording Rules
We only record video calls if your parent says yes. A red dot will always appear on the screen so you know.
Waving Goodbye
We don't keep your videos forever. When you finish, they are safely erased like writing in the sand.
Our Promise to You:
We do not sell your data or use it for adverts. We only use it to help you talk, play, and learn with your therapist. If you have any questions, you can ask your parent or therapist to explain more!