Data Protection & Privacy
We believe trust is foundational to mental health support. This policy explains how we collect, use, store and protect your personal data in full compliance with UK GDPR and the Data Protection Act 2018.
What Data We Collect
Name and email address when you contact us or sign up for newsletters.
Anonymous usage data through cookies and analytics to improve our website experience.
Feedback and survey responses, which are anonymised unless you choose to provide identifying details.
We do not collect sensitive health data, and we never require young people to create accounts or share personal information to access our free resources.
How We Use Your Data
To respond to contact form enquiries and provide support.
To send newsletters or updates you have opted in to receive.
To improve our website, resources and services based on aggregated, anonymised usage patterns.
To meet legal and regulatory obligations.
We will never sell, rent or share your personal data with third parties for marketing purposes.
Legal Basis for Processing
Under UK GDPR, we process personal data on the following lawful bases:
Consent — where you have given clear, informed consent (e.g., newsletter sign-up).
Legitimate interest — where processing is necessary for our charitable purposes and does not override your rights.
Legal obligation — where we are required by law to process or retain data.
Data Security
Encrypted connections (HTTPS/TLS) across our entire website.
Access controls limiting who within our team can view personal data.
Regular security reviews of our systems and third-party services.
Secure deletion of data that is no longer required.
Data Retention
We retain personal data only for as long as necessary to fulfil the purpose for which it was collected:
Contact form submissions are retained for up to 12 months, then securely deleted.
Newsletter subscriber data is retained until you unsubscribe.
Anonymised analytics data may be retained indefinitely to track long-term trends.
Cookies & Analytics
Our website uses cookies to improve your browsing experience. We use:
Essential cookies — required for the website to function correctly.
Analytics cookies — help us understand how visitors interact with our site (e.g., page views, time on site). These are anonymised.
We do not use advertising or tracking cookies. You can manage your cookie preferences through your browser settings at any time.
Your Rights
Access the personal data we hold about you.
Request correction of inaccurate or incomplete data.
Request deletion of your data (right to be forgotten).
Withdraw consent at any time where processing is based on consent.
Object to processing based on legitimate interest.
Lodge a complaint with the Information Commissioner’s Office (ICO) if you believe your rights have been violated.
Contact Us
If you have any questions about this policy or wish to exercise your data rights, please contact us via our contact page or write to us at our registered address.
This policy was last reviewed in March 2026 and is reviewed annually to ensure ongoing compliance with UK GDPR and the Data Protection Act 2018.
Information Commissioner's Office
If you are not satisfied with how we handle your data, you have the right to lodge a complaint with the ICO at ico.org.uk