1. What personal data we collect

We may collect the following types of personal data: name and contact details (address, telephone number, email address); date of birth; health and wellbeing information (where relevant to our services); details of your involvement with us as a service user, volunteer, or supporter; financial information (for donations or expenses); and communications you send to us.

2. How we collect your data

We collect personal data directly from you when you: contact us by phone, email, or post; complete a referral or registration form; sign up to volunteer; make a donation; attend one of our events or activities; or subscribe to our newsletter.

We may also receive information about you from referral partners such as GPs, social workers, or other health and care professionals, with your knowledge and consent.

3. Why we use your data

We use your personal data to: provide our services to you; manage your involvement as a volunteer; process donations and send receipts; communicate with you about our work and events; comply with our legal and regulatory obligations; and improve our services.

Our lawful basis for processing personal data is usually consent, legitimate interests, or the performance of a contract. For special category data (such as health information), we rely on explicit consent or substantial public interest.

4. How we store and protect your data

Your personal data is stored securely on password-protected systems and, where applicable, in locked physical files.

We retain personal data only for as long as necessary for the purpose for which it was collected, or as required by law.

We will never sell your personal data to third parties.

5. Sharing your data

We will only share your personal data with third parties where necessary to provide our services, where you have given consent, or where we are required to do so by law.

We may share information with referral partners, statutory agencies, or emergency services where there is a safeguarding concern or risk to life.

6. Your rights

Under UK GDPR, you have the right to: access the personal data we hold about you; request correction of inaccurate data; request deletion of your data (in certain circumstances); object to or restrict our processing of your data; and withdraw consent at any time.

To exercise any of these rights, please contact us at [email protected].

You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.

7. Cookies

Our website uses cookies to improve your experience. Please see our Cookie Policy for more information.

8. Contact us

If you have any questions about this statement or how we handle your personal data, please contact us at [email protected] or write to us at The Healing Hubs, Alton, Hampshire.

9. Review

This statement will be reviewed annually or following any relevant change in legislation or our data processing activities.