GDPR

Legal Basis for Processing

• Consent: e.g., newsletters or optional updates.
• Contract: where processing is necessary to deliver program agreements.
• Legitimate Interests: to evaluate and improve programs while respecting your rights.
• Public Interest: where collaborating with public bodies for community benefit.

Data Subject Rights

• Access and confirmation
• Portability of data you provided
• Restriction or objection to certain processing
• Erasure where no longer needed or consent is withdrawn

International Transfers

Where transfers occur outside the EU/UK, we use appropriate safeguards such as standard contractual clauses and ensure vendors meet security expectations.

• Encryption in transit
• Access controls and staff training
• Data minimisation and retention schedules

Data Protection Contact

Email: [email protected]

Submit a rights request (email-based process)

We aim to respond to rights requests within one month.