Privacy Policy

Last Updated: 6th March 2025

Gloucestershire Youth Neurodiversity Project (“we,” “us,” or “our”) is committed to protecting and respecting your privacy. This Privacy Policy outlines how we collect, use, and safeguard your personal data in compliance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

1. Information We Collect

We may collect and process the following types of personal information:

• Personal Identification Data: Name, date of birth, contact details (email, phone number, address).

• Sensitive Information: Information relating to neurodiversity, health, or special educational needs (only where necessary and with explicit consent).

• Technical Data: IP addresses, website usage, and cookies (see Section 7 – Cookies).

• Communications: Correspondence through email, phone, or online forms.

2. How We Use Your Information

We collect and use your personal data for the following purposes:

• To provide services and support tailored to neurodivergent young people.

• To communicate with you regarding our projects, events, and updates.

• To comply with legal obligations and safeguarding requirements.

• To improve our website and services based on user interactions and feedback.

We only process personal data where we have a lawful basis, such as consent, legitimate interest, or legal obligation.

3. How We Store and Protect Your Information

We take appropriate security measures to protect your personal data from unauthorised access, alteration, or disclosure. Your information is securely stored, and access is restricted to authorised personnel only.

We retain your personal data only for as long as necessary to fulfil the purposes outlined in this policy or as required by law.

4. Sharing Your Information

We do not sell or rent personal data to third parties. However, we may share information with:

• Trusted service providers assisting in delivering our services (e.g., IT support, event management).

• Safeguarding authorities where necessary for child protection and legal compliance.

• Regulatory bodies if required by law or legal proceedings.

Any data shared with third parties is handled securely and in compliance with data protection laws.

5. Your Rights Under UK GDPR

You have the following rights regarding your personal data:

• Right to Access: Request a copy of your personal data.

• Right to Rectification: Correct inaccurate or incomplete data.

• Right to Erasure: Request deletion of your data (where applicable).

• Right to Restrict Processing: Limit how we use your data.

• Right to Object: Object to data processing under certain circumstances.

• Right to Data Portability: Request transfer of your data to another service provider.

• Right to Withdraw Consent: If processing is based on consent, you can withdraw it at any time.

To exercise any of these rights, please contact us at [Insert Contact Email].

6. Third-Party Links

Our website or communications may contain links to third-party websites. We are not responsible for the privacy practices of these external sites and encourage you to review their policies.

7. Cookies and Website Analytics

We use cookies to enhance user experience and collect website analytics. You can manage cookie preferences through your browser settings. For more details, please see our Cookies Policy.

8. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. Any changes will be posted on our website, and we encourage you to review it periodically.