Privacy Policy

1. Who we are
Uthink People Developing People (Uthink PDP) is a registered charity in England and Wales (1150504) and Scotland (SC043969).

Registered office:
West Lancs Investment Centre
Maple View
Skelmersdale
WN8 9TG

For the purposes of data protection law, Uthink PDP is the data controller responsible for your personal data.

Contact for data protection queries:
Email: sharonrankin@uthinkpdp.org.uk
Website: www.uthinkpdp.org.uk http

2. About this privacy notice
This General Privacy Notice explains how we collect and use personal data.
Where more specific privacy notices apply (for example, for employees, volunteers, or service users), those should be read alongside this notice.

3. What personal data we collect
We may collect and process the following types of personal data:
Identity data: name, date of birth
Contact data: address, email address, telephone number
Personal data: age, gender, background information
Health data: medical or wellbeing information (where relevant to our services)
Technical data: IP address, browser type, website usage
Communication data: enquiries, complaints, correspondence

We only collect personal data that is necessary for our purposes.

4. Special category data
Some of the data we process (such as health information) is classified as special category data under UK GDPR.
We will only process this data where permitted by law, including where:

You have given explicit consent, or
Processing is necessary for the provision of health, social care, or safeguarding support, or
There is a substantial public interest, such as protecting vulnerable individuals.

5. How we use your personal data
We use your personal data for the following purposes:
• To provide and manage our services
• To respond to enquiries or complaints
• To manage our relationship with you
• To ensure safeguarding and wellbeing
• To comply with legal and regulatory obligations
• To improve our services and website
• To send relevant communications (where permitted)

6. Lawful bases for processing
We rely on the following lawful bases under UK GDPR:
• Contract: where processing is necessary to provide services to you
• Legal obligation: to comply with the law
• Legitimate interests: to operate and improve our services (balanced against your rights)
• Consent: where you have given clear permission (e.g. for certain communications)

Where we rely on legitimate interests, we ensure your rights are not overridden.

7. Sharing your personal data
We may share your personal data with:

• Service providers acting as data processors (e.g. IT, hosting, payroll)
• Professional advisers (e.g. legal, insurance, audit)
• Government and regulatory bodies (e.g. HMRC, law enforcement)
• Safeguarding authorities where necessary

All third parties are required to respect the security of your data and process it lawfully.
Some organisations we share data with may act as independent data controllers.

8. International data transfers
Where personal data is transferred outside the UK, we ensure appropriate safeguards are in place, such as:

• UK adequacy regulations, or
• UK International Data Transfer Agreements (IDTAs), or
• Other lawful transfer mechanisms

9. Data retention
We only retain personal data for as long as necessary.
Retention periods are determined by:

• Legal and regulatory requirements
• The purpose for which the data was collected
• Our internal Data Retention Policy

Data is securely deleted or anonymised when no longer required.

10. Your data protection rights
Under UK GDPR, you have the right to:

• Access your personal data
• Correct inaccurate data
• Request deletion of your data
• Restrict processing
• Object to processing
• Data portability (where applicable)
• Withdraw consent at any time

You also have the right to complain to the Information Commissioner’s Office (ICO).

11. Making a request
To exercise your rights, please contact us using the details above.
We may need to verify your identity, but we will only request information that is necessary and proportionate. We aim to respond within 28 days.

12. Cookies
Our website uses cookies to improve your experience and understand how our site is used.
We use:

• Essential cookies: required for the website to function
• Analytics cookies (e.g. Google Analytics) – to understand usage
• Optional cookies: only used with your consent

You can control cookies through your browser settings.

13. Marketing communications
We may send you information about our services where:

• You have consented, or
• You have an existing relationship with us and have not opted out

You can opt out at any time by contacting us or using unsubscribe links.

14. Data security
We take appropriate technical and organisational measures to protect your personal data from:

• Unauthorised access
• Loss or misuse
• Disclosure or alteration

15. Changes to this notice
We may update this Privacy Notice from time to time.
The latest version will always be available on our website.

16. Complaints
If you are unhappy with how we handle your personal data, please contact us first.

You also have the right to lodge a complaint with the Information Commissioner’s Office:

Information Commissioner’s Office
Wycliffe House
Water Lane
Wilmslow
SK9 5AF

Website: https://ico.org.uk/concerns/