GDPR Privacy Notice Template
📄
1. Introduction
This Privacy Notice explains how The Uplift Initiative CIC (“we”, “us”, “our”) collects, uses, stores, and protects personal data in line with the UK General Data Protection Regulation (UK GDPR).
We are committed to handling personal information responsibly, lawfully, and transparently.
2. Who We Are
-
Organisation name:: The Uplift Initiative CIC
-
Registered address: Three Trees community centre,
-
Email address: theuplift.org@gmail.com
-
Data Protection Lead / Contact (if applicable): TAMMY PICKETT
3. What Personal Data We Collect
We may collect and process the following types of personal data:
Information provided directly by individuals
-
Name
-
Email address
-
Phone number
-
Organisation or project details
-
Service enquiries or booking information
-
Payment details (processed securely via third‑party providers)
Information collected automatically
-
IP address
-
Browser type and device information
-
Cookies and usage data (for analytics and website performance)
4. How We Use Personal Data
We use personal data to:
-
Provide services, support, or resources
-
Respond to enquiries
-
Manage bookings, payments, or memberships
-
Send updates, newsletters, or information individuals have opted into
-
Improve our services, website, and user experience
-
Meet legal or regulatory requirements
5. Legal Basis for Processing
We process personal data under one or more of the following lawful bases:
-
Consent – when individuals opt into communications or resources
-
Contract – when delivering paid or requested services
-
Legitimate interests – for service improvement, analytics, or operational needs
-
Legal obligation – where required by law
6. How We Store and Protect Data
We store data securely using trusted platforms such as cloud services, email systems, and payment processors.
We use appropriate technical and organisational measures to protect personal data from loss, misuse, or unauthorised access.
7. Sharing Personal Data
We do not sell personal data.
We may share information with trusted third‑party providers who support our operations, such as:
-
Payment processors
-
Email marketing platforms
-
Scheduling tools
-
Cloud storage providers
All third parties are required to comply with GDPR and process data only on our instructions.
8. Data Retention
We keep personal data only for as long as necessary for the purposes described in this notice.
Typical retention periods include:
Data Type Retention Period
Client or service records Up to 6 years
Email subscribers Until the individual unsubscribes
Financial records 6 years (legal requirement)
9. Individual Rights
Under UK GDPR, individuals have the right to:
-
Access their personal data
-
Correct inaccurate information
-
Request deletion
-
Withdraw consent
-
Restrict processing
-
Object to processing
-
Request data portability
To exercise these rights, individuals can contact us at: theuplift.org@gmail.com
10. Cookies and Website Tracking
Our website may use cookies to improve functionality and user experience. Individuals can manage or disable cookies through their browser settings.
11. Updates to This Privacy Notice
We may update this Privacy Notice from time to time. The most recent version will always be available on our website or upon request.
12. Contact Information
For questions about this Privacy Notice or how we handle personal data, please contact:
GDPR Privacy Notice Template