top of page

GDPR Privacy Notice Template 

📄 

1. Introduction

This Privacy Notice explains how  The Uplift Initiative CIC (“we”, “us”, “our”) collects, uses, stores, and protects personal data in line with the UK General Data Protection Regulation (UK GDPR).

We are committed to handling personal information responsibly, lawfully, and transparently.

2. Who We Are

  • Organisation name:: The Uplift Initiative CIC

  • Registered address: Three Trees community centre, 

  • Email address: theuplift.org@gmail.com

  • Data Protection Lead / Contact (if applicable): TAMMY PICKETT

3. What Personal Data We Collect

We may collect and process the following types of personal data:

Information provided directly by individuals

  • Name

  • Email address

  • Phone number

  • Organisation or project details

  • Service enquiries or booking information

  • Payment details (processed securely via third‑party providers)

Information collected automatically

  • IP address

  • Browser type and device information

  • Cookies and usage data (for analytics and website performance)

4. How We Use Personal Data

We use personal data to:

  • Provide services, support, or resources

  • Respond to enquiries

  • Manage bookings, payments, or memberships

  • Send updates, newsletters, or information individuals have opted into

  • Improve our services, website, and user experience

  • Meet legal or regulatory requirements

5. Legal Basis for Processing

We process personal data under one or more of the following lawful bases:

  • Consent – when individuals opt into communications or resources

  • Contract – when delivering paid or requested services

  • Legitimate interests – for service improvement, analytics, or operational needs

  • Legal obligation – where required by law

6. How We Store and Protect Data

We store data securely using trusted platforms such as cloud services, email systems, and payment processors.

We use appropriate technical and organisational measures to protect personal data from loss, misuse, or unauthorised access.

7. Sharing Personal Data

We do not sell personal data.

We may share information with trusted third‑party providers who support our operations, such as:

  • Payment processors

  • Email marketing platforms

  • Scheduling tools

  • Cloud storage providers

All third parties are required to comply with GDPR and process data only on our instructions.

8. Data Retention

We keep personal data only for as long as necessary for the purposes described in this notice.

Typical retention periods include:

Data Type Retention Period

Client or service records Up to 6 years

Email subscribers Until the individual unsubscribes

Financial records 6 years (legal requirement)

9. Individual Rights

Under UK GDPR, individuals have the right to:

  • Access their personal data

  • Correct inaccurate information

  • Request deletion

  • Withdraw consent

  • Restrict processing

  • Object to processing

  • Request data portability

To exercise these rights, individuals can contact us at: theuplift.org@gmail.com

10. Cookies and Website Tracking

Our website may use cookies to improve functionality and user experience. Individuals can manage or disable cookies through their browser settings.

11. Updates to This Privacy Notice

We may update this Privacy Notice from time to time. The most recent version will always be available on our website or upon request.

12. Contact Information

For questions about this Privacy Notice or how we handle personal data, please contact:

theuplift.org@gmail.com

GDPR Privacy Notice Template 

bottom of page