Privacy Policy

1. Information We Collect

We may collect the following categories of personal information:

• Personal Identifiers: Name, email address and postal address when you subscribe to newsletters, volunteer, register for events or make a donation.
• Usage Data: IP address, browser type, pages visited and time spent on our website through cookies and analytics technologies.
• Event & Donation Information: Payment details processed securely through trusted third-party providers such as Stripe, along with your event registrations and preferences.
• Sensitive Information: In limited circumstances, safeguarding information relating to vulnerable individuals where appropriate support is required.

We do not knowingly collect personal information from children under the age of 13 without appropriate parental or guardian consent, in line with our safeguarding commitments.

2. How We Use Your Information

Your information is used to:

• Deliver our services, events and online safety resources.
• Improve our website, educational programmes and digital inclusion initiatives.
• Send newsletters, updates and cyber safety communications.
• Meet legal and regulatory obligations, including fraud prevention.
• Support fundraising activities and measure the impact of our work using anonymised information where possible.

3. Sharing Your Information

We only share your information where necessary and appropriate.

• Trusted service providers, including email marketing platforms and secure payment processors.
• Welsh Government partners and collaborating organisations supporting online safety initiatives.
• Aggregated or anonymised information for research, reporting and programme evaluation.

We never sell your personal information. If our organisation undergoes a merger, acquisition or significant restructuring, we will notify affected users where required.

4. Data Security

We use appropriate technical and organisational measures, including encryption, firewalls and controlled access procedures, to protect your personal information. While we work hard to safeguard your data, no online system can guarantee complete security. Should a breach occur that affects your rights, we will notify you in accordance with applicable legal requirements.

5. Your Rights

Under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act, you have the right to:

• Access the personal information we hold about you.
• Request corrections to inaccurate information.
• Request deletion of your personal information where applicable.
• Object to certain types of processing or withdraw previously given consent.
• Request a copy of your data in a portable format.

To exercise any of these rights, please contact us at [email protected]. We aim to respond to all requests within one month.

6. International Data Transfers

Your information is primarily stored within the United Kingdom or the European Union. Where information must be transferred internationally, including to trusted service providers based outside the UK, we ensure appropriate safeguards such as Standard Contractual Clauses are in place.

7. Data Retention

We retain personal information only for as long as necessary to fulfil the purposes outlined in this policy or to comply with legal obligations. For example, donation records may be retained for up to six years where required by law.

8. Changes to This Privacy Policy

We may update this Privacy Policy periodically to reflect changes in our services, legal obligations or organisational practices. Significant updates will be communicated through our website or, where appropriate, by email.