1. Who we are

The Healing Hubs is a registered charity (No. 1201382) based in the United Kingdom. We are the data controller for the personal data we hold.

You can contact us at [email protected] or by calling 0300 102 1588.

2. What data we collect

Contact information — name, address, telephone number, and email address.

Health and wellbeing information — where relevant to the services we provide, and only with your explicit consent.

Referral information — details provided by GPs, social prescribers, or other referrers.

Volunteer and staff information — including DBS check results, references, and employment records.

Website usage data — including anonymised analytics to help us improve our website.

3. Why we collect it

To deliver our befriending and community services to you.

To communicate with you about our services, events, and activities.

To comply with our legal and regulatory obligations.

To manage our volunteers and staff.

To apply for grants and report to funders.

4. Legal basis for processing

We process your data on the basis of your consent, the performance of a contract, compliance with a legal obligation, or our legitimate interests as a charity.

Where we process special category data (such as health information), we rely on your explicit consent or the substantial public interest condition.

5. How long we keep your data

We keep personal data only for as long as necessary for the purpose for which it was collected, or as required by law.

Service user records are typically retained for seven years after the end of service. Volunteer records are retained for six years after the end of the volunteer relationship.

6. Your rights

You have the right to access the personal data we hold about you, to correct inaccurate data, to request deletion, to restrict processing, and to data portability.

You also have the right to withdraw consent at any time, and to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.

To exercise any of these rights, please contact us at [email protected].

7. Sharing your data

We do not sell your personal data. We may share it with statutory agencies (such as the NHS or local authority) where necessary to deliver services or meet safeguarding obligations.

We may share data with trusted third-party service providers who process data on our behalf, under strict data processing agreements.