1. Overview
We collect and use personal data only where it is necessary to provide our services, respond to enquiries, meet safeguarding-aware practice, comply with legal obligations, and improve programme delivery.
- We use plain-language processes and minimise what we collect.
- We apply appropriate security and access controls.
- We respect your rights and respond to requests promptly.
2. What we collect
Depending on context, we may collect:
- Contact information (name, email, phone number, organisation).
- Enquiry details (topic, programme interest, location, audience, notes you provide).
- Programme delivery information (attendance, feedback, learning outcomes where relevant).
- Basic website data (limited analytics, security logs, cookies where enabled).
3. How we use personal data
- Respond to enquiries and provide requested information.
- Plan and deliver programmes (including safeguarding-aware administration).
- Provide outcomes reporting for partners or funders where required.
- Improve service quality, materials and delivery methods.
- Maintain security, prevent misuse, and comply with legal obligations.
4. Lawful basis for processing
We process data under relevant lawful bases, which may include consent, legitimate interests, performance of a contract, and legal obligations. Where consent is used, you may withdraw it at any time.
6. Data retention
We retain personal data only as long as necessary for the purpose it was collected, including legal and reporting obligations. Retention periods vary by programme and engagement type.
7. Security
We implement appropriate technical and organisational measures to protect personal data, including access controls, secure storage, and minimisation practices. No system is perfectly secure, but we aim to apply proportionate safeguards for the nature of the data we hold.
8. Your rights
Subject to applicable law, you may request:
- Access to personal data we hold about you.
- Correction of inaccurate or incomplete data.
- Deletion (where applicable).
- Restriction or objection to processing (where applicable).
- Data portability (where applicable).
To make a request, email info@cyberlife.org.uk with sufficient detail to identify your records.
10. Changes to this policy
We may update this privacy policy to reflect changes in our services, legal requirements, or operational practices. We recommend checking this page periodically.