Introduction

This Privacy Notice explains how Find A Way: Psychological Services CIC collects, uses, and protects your personal data when you engage with our services. It also outlines your rights under the Data Protection Act 2018 and the UK General Data Protection Regulation (UK GDPR).

For the purposes of these laws, Find A Way: Psychological Services CIC is the Data Controller. This means we are responsible for deciding how your personal data is used and why it is collected.

We are committed to respecting your privacy and handling your data fairly, lawfully, and transparently.

Who We Are

Find A Way: Psychological Services CIC is a community-based organisation that supports families — including children, young people, and vulnerable adults — through advocacy, mentoring, inclusive activities, and emotional wellbeing services.

Registered Office: 82 James Carter Road, IP28 7DE

Email: sophia@findaway.org

Company Number: 15992869

Purpose of this Notice

The purpose of this Privacy Notice is to tell you:

• What personal data we collect about you
• Why we collect it and how we use it
• Who we may share it with
• How we keep it safe
• What your rights are under data protection law

What Information We Collect

We may collect the following information depending on your relationship with us:

• Basic contact details — name, phone number, email, address
• Demographic information — date of birth, gender
• Emergency contact details
• Relevant personal information — health needs, education/employment status, family or support circumstances
• Safeguarding or risk-related information — where necessary to ensure safety
• Communication records — notes from sessions, emails, referrals

We only collect what is necessary to provide our services safely, appropriately, and effectively.

How We Use Your Information

We use your data to:

• Deliver our services and support to you
• Respond to enquiries and referrals
• Maintain accurate records of our work
• Safeguard children, young people, and adults at risk
• Comply with legal, contractual, and funder requirements
• Improve our services and monitor impact (using anonymised data for reporting)

Lawful Basis for Processing

We rely on different lawful bases depending on the situation. These include:

• Consent — where you have given clear permission
• Legal obligation — where we must comply with the law (e.g. safeguarding, data retention)
• Vital interests — to protect someone's life or wellbeing
• Public task — where we deliver services in the public interest
• Legitimate interests — to run our services effectively (unless these are overridden by your rights)

Who We May Share Your Data With

We never sell your information. We may share your data with:

• Professionals involved in your care or support (e.g. schools, social workers, GPs)
• Statutory agencies (e.g. local authority, police) where there is a safeguarding concern
• Funders or commissioners (only anonymised or with consent, unless required otherwise)
• Volunteers or staff members — on a need-to-know basis only

We will always aim to involve you in decisions about sharing your information unless there is a legal or safeguarding reason not to.

Data Security and Storage

We take steps to protect your personal data:

• Electronic records are stored on secure, password-protected systems
• Paper records (if used) are kept in locked storage
• Access is restricted to those who need it
• We train our staff and volunteers in data protection and safeguarding
• We keep your information only as long as necessary, in line with legal requirements and good practice. When no longer needed, your data is securely deleted or anonymised.

Your Rights

Under the UK GDPR, you have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate or incomplete data
• Request erasure of your data in certain circumstances
• Object to processing, or ask us to restrict how we use your data
• Withdraw consent at any time (if we are using consent as the basis)
• Complain to the Information Commissioner's Office (ICO) if you are unhappy with how your data is handled:
  Website: https://ico.org.uk | Tel: 0303 123 1113

To exercise your rights or ask questions, please contact:

Data Protection Lead — Dr Sophia Bentley — Find A Way: Psychological Services CIC

Email: sophia@findaway.org