Policies & procedures

Website Privacy Notice

This Website Privacy Notice explains how Street Lights Collective CIC collects, uses, stores and protects personal information when people visit our website, contact us online, complete website forms, sign up for updates, make enquiries,…

All policies
Organisation details
Information
Organisation name
Street Lights Collective CIC
Company number
17300794
Registered office
Prime Apartments, 483 Green Lanes, London, N13 4FG
Website
[Insert website address]
Contact email
[Insert contact email address]
Policy owner
Directors of Street Lights Collective CIC
Data Protection Lead
[Insert named lead or role]
Safeguarding Lead
Phillip Chackochen, Designated Safeguarding Lead
Date approved
[Insert date]
Review date
[Insert date, usually annually]

Purpose of this privacy notice

This Website Privacy Notice explains how Street Lights Collective CIC collects, uses, stores and protects personal information when people visit our website, contact us online, complete website forms, sign up for updates, make enquiries, book services, take part in programmes, request support, apply to volunteer, or engage with our online content.

Street Lights Collective CIC is committed to protecting personal information and respecting privacy. Our work involves young people, families, communities, schools, professionals, partners and volunteers. We therefore handle personal data carefully, lawfully and securely, especially where information relates to children, young people, safeguarding, trauma, family support or vulnerable circumstances.

This notice should be read alongside our Data Protection Policy, Safeguarding Policy, Equality, Diversity and Inclusion Policy, Complaints Procedure and any consent forms used for programmes, referrals, photography, testimonials or events.

Who we are

Street Lights Collective CIC is a Community Interest Company registered in England and Wales with company number 17300794. Our registered office is Prime Apartments, 483 Green Lanes, London, N13 4FG.

Our ethos is Presence. Power. Purpose. We deliver community benefit through youth guidance, family support, psycho-education, mentoring, school programmes, community engagement, cultural identity work, professional training, safeguarding-led practice and futures support for young people.

For data protection purposes, Street Lights Collective CIC is the data controller for personal information collected through our website and related online services, unless we clearly state otherwise.

Data protection principles

When we process personal information, we will follow the UK GDPR and Data Protection Act 2018 principles. This means personal information must be:

  • processed lawfully, fairly and transparently
  • collected for clear and legitimate purposes
  • limited to what is necessary
  • accurate and kept up to date where needed
  • kept only for as long as necessary
  • kept secure and protected against unauthorised access, loss or misuse
  • handled with proper accountability

Information we may collect through the website

The personal information we collect depends on how a person uses the website. We may collect the following types of information:

Type of informationExamples
Identity informationName, role, organisation, job title, age or age range where relevant
Contact informationEmail address, telephone number, postal address, school or organisation address
Enquiry informationMessages sent through contact forms, service enquiries, training enquiries, partnership requests and booking requests
Programme informationProgramme interest, referral details, attendance information, support needs and consent information where collected online
Safeguarding informationInformation shared with us that raises concern about the safety or wellbeing of a child, young person or adult at risk
Volunteer or recruitment informationApplication details, experience, training, references and role interests
Marketing and communication preferencesNewsletter sign ups, consent to receive updates and preferences for communication
Website technical informationIP address, browser type, device type, approximate location, pages viewed, time spent on site and cookies
Media and testimonial informationPhotos, videos, stories, quotes or feedback where someone has consented to share them

Special category data and sensitive information

Some information we receive may be more sensitive. This may include information about health, disability, trauma, family circumstances, ethnicity, faith, safeguarding concerns, criminal exploitation, serious youth violence, school exclusion, care experience, mental health or other personal circumstances.

We will only collect sensitive information where there is a clear reason to do so, such as safeguarding, programme suitability, equality monitoring, support planning, legal duties, explicit consent, or substantial public interest connected to safeguarding and the protection of children and adults at risk.

We will treat safeguarding information with particular care. Safeguarding records will be stored securely and shared only where necessary and lawful, including with statutory agencies where there is a risk of harm.

Children and young people

Street Lights Collective CIC works with children and young people. We recognise that children and young people deserve particular protection when their personal information is collected or used.

Where our website collects information directly from children or young people, we will aim to use clear language and only collect what is necessary. Depending on the nature of the activity, we may require parent, carer, school or responsible adult consent before a young person takes part in a programme, event, referral process, media activity or online activity.

If a child or young person contacts us through the website and shares information that suggests they or someone else may be at risk of harm, we may need to share that information with our Designated Safeguarding Lead or with statutory services. We will not promise secrecy where there is a safeguarding concern.

How we use personal information

We may use personal information to:

  • respond to enquiries and messages
  • manage bookings, referrals, programmes, events and training requests
  • support young people, families, schools, partners and professionals
  • assess suitability for programmes, mentoring, events or support
  • manage safeguarding concerns and protect people from harm
  • send updates, newsletters or information where consent has been given or where there is another lawful basis
  • manage volunteers, advisors, delivery staff, practitioners and partners
  • process feedback, testimonials and impact evidence
  • monitor website use and improve website performance
  • meet legal, regulatory, funding, insurance and governance requirements
  • protect the organisation, its beneficiaries, staff, volunteers and partners from risk, misuse or unlawful activity

Lawful bases for using personal information

We will only use personal information where we have a lawful basis. Different lawful bases may apply depending on the activity.

Lawful basisHow it may apply
ConsentWhen someone signs up to receive updates, agrees to photography, shares a testimonial, or gives permission for a specific use of their information
ContractWhen we need information to provide a service, respond to a booking, deliver training or manage an agreement
Legal obligationWhen we must keep records, respond to legal duties, comply with regulation, or report certain matters
Vital interestsWhere information may need to be used to protect someone’s life or immediate safety
Public taskWhere work is carried out with a public body and the processing is necessary for a public function
Legitimate interestsWhere we have a clear organisational or community interest, such as responding to enquiries, managing services, improving our website, protecting our organisation and maintaining records
Substantial public interestWhere sensitive information is processed for safeguarding, preventing harm, supporting vulnerable people, or protecting children and adults at risk

Safeguarding and contextual safeguarding

Street Lights Collective CIC understands safeguarding in its wider context. Young people may face harm not only at home, but also in peer groups, schools, estates, parks, transport routes, online spaces, social media platforms and local areas affected by postcode conflict, exploitation or serious youth violence.

If information submitted through the website raises a safeguarding concern, it will be handled in line with our Safeguarding Policy. The concern may be shared with Phillip Chackochen, our Designated Safeguarding Lead, and where necessary with children’s social care, adult safeguarding services, police, schools, local authority safeguarding teams or other relevant agencies.

This may include concerns relating to abuse, neglect, criminal exploitation, county lines, grooming, online harm, sexual exploitation, serious youth violence, knife crime, domestic abuse, radicalisation, self harm, missing episodes or risk to an adult at risk.

Cookies and website analytics

Our website may use cookies and similar technologies to help the website work properly, improve user experience, measure website traffic, understand which pages are visited and support security.

Cookies may include:

  • essential cookies that allow the website to function
  • analytics cookies that help us understand website use
  • preference cookies that remember choices
  • security cookies that help protect the website
  • embedded content cookies from third party platforms where content such as videos, maps or social media feeds are used
  • Where required, users will be asked to manage cookie preferences through the website cookie banner or settings. Users can also control cookies through their browser settings.

The exact cookies used should be listed in a separate cookie notice or cookie table on the website once the website platform and plugins are confirmed.

Social media and third party platforms

Our website may link to or display content from third party platforms such as Instagram, TikTok, YouTube, LinkedIn, Eventbrite, Google Forms, Microsoft Forms, booking systems, donation platforms or newsletter services.

When a person clicks on a third party link or uses an embedded service, that platform may collect information in line with its own privacy notice. Street Lights Collective CIC is not responsible for the privacy practices of external websites or platforms. We encourage users to read the privacy notices of any third party services they use.

Contact forms, referrals and online forms

If someone uses a contact form, referral form, booking form, volunteer form or programme enquiry form on our website, we will use the information to respond to the request and manage the relevant process.

Where online forms collect sensitive or safeguarding-related information, access will be restricted to people who need to see it. We will avoid collecting unnecessary information and will not ask people to disclose more than is required for the stated purpose.

Email updates and marketing

We may send updates, newsletters, event information or programme information where someone has signed up, given consent, or where we have another lawful basis to contact them.

People can unsubscribe from marketing emails at any time by using the unsubscribe link where available or by contacting us directly. We will not sell personal information to third parties.

Photography, video, stories and testimonials

Street Lights Collective CIC may use photographs, videos, quotes, stories or testimonials to celebrate impact, promote programmes, evidence community benefit and share positive messages. We will seek consent where required, especially where children, young people or vulnerable adults are involved.

We will not knowingly publish images, names, stories or identifying details where doing so may create safeguarding, reputational, emotional or community safety risk. We will take extra care where someone has lived experience of violence, exploitation, trauma, criminal justice involvement, family crisis or safeguarding concerns.

Who we may share information with

We will only share personal information where there is a lawful reason to do so. We may share information with:

  • staff, directors, practitioners, volunteers or advisors who need the information for their role
  • Phillip Chackochen, our Designated Safeguarding Lead, where safeguarding concerns arise
  • schools, colleges, local authorities, youth services or partners involved in programme delivery or referrals
  • children’s social care, adult safeguarding services, police, health services or emergency services where safeguarding or safety requires it
  • funders or commissioners where reporting is required, usually in anonymised or aggregated form where possible
  • professional advisors, insurers, accountants or legal advisors where necessary
  • website, email, cloud storage, form, booking, payment or IT service providers who support our systems
  • regulators or public authorities where we are legally required to do so
  • We will not sell personal information. We will not share information for unrelated marketing.

International transfers

Some website, email, cloud, social media, form or analytics providers may process information outside the United Kingdom. Where this happens, we will take reasonable steps to ensure appropriate safeguards are in place, such as using providers with recognised data protection safeguards or contractual protections.

How we keep information secure

Street Lights Collective CIC will take reasonable measures to protect personal information. These may include:

  • password protected systems
  • restricted access to sensitive records
  • secure cloud storage
  • limited access to safeguarding information
  • staff and volunteer confidentiality expectations
  • secure handling of emails and attachments
  • careful use of shared devices
  • secure disposal of information no longer needed
  • regular review of who has access to records
  • reporting and responding to data breaches

How long we keep information

We will keep personal information only for as long as necessary for the purpose it was collected, including legal, safeguarding, financial, insurance, funding and governance reasons.

Type of recordIndicative retention approach
General website enquiriesKept only as long as needed to respond and manage the enquiry
Newsletter sign upsKept until the person unsubscribes or the list is reviewed
Programme and attendance recordsKept for the period needed for delivery, reporting, safeguarding, insurance and evaluation
Safeguarding recordsKept securely and for longer periods where required by safeguarding practice and legal considerations
Financial and contract recordsKept in line with legal, accounting and funding requirements
Volunteer and recruitment recordsKept in line with recruitment, safeguarding and governance requirements
Photography and media consent recordsKept while the media is used and for a reasonable period afterwards
Website analyticsKept according to the settings of the analytics provider and our website configuration

Personal information rights

Under data protection law, individuals have rights in relation to their personal information. These may include the right to:

  • be informed about how information is used
  • request access to personal information
  • ask for inaccurate information to be corrected
  • ask for information to be erased in certain circumstances
  • ask us to restrict how information is used
  • object to certain uses of information
  • withdraw consent where consent is the lawful basis
  • request transfer of information in certain circumstances
  • complain to the Information Commissioner’s Office
  • These rights are not absolute and may depend on the lawful basis for processing and the nature of the information. For example, safeguarding records may need to be retained where there is a legal or safeguarding reason.

How to contact us about privacy

Questions about this Website Privacy Notice or the way Street Lights Collective CIC handles personal information should be sent to:

  • Street Lights Collective CIC Prime Apartments 483 Green Lanes London N13 4FG
  • Email: [Insert privacy or contact email address]
  • Where a privacy concern relates to safeguarding, the matter may also be referred internally to Phillip Chackochen, Designated Safeguarding Lead.

Complaints to the Information Commissioner’s Office

People have the right to complain to the Information Commissioner’s Office if they are unhappy with how their personal information has been handled. The Information Commissioner’s Office is the UK regulator for data protection.

ICO website: www.ico.org.uk

ICO telephone: 0303 123 1113

Changes to this privacy notice

Street Lights Collective CIC may update this Website Privacy Notice from time to time. The latest version should be published on the website. The review date should be updated when changes are made.

Website publication statement

This notice should be placed on the Street Lights Collective CIC website in a clearly accessible privacy page. A link should be included in the website footer and wherever personal information is collected, such as contact forms, referral forms, newsletter sign ups, booking forms, volunteer forms and event registration forms.

Approval and review

ItemDetails
Policy titleWebsite Privacy Notice
OrganisationStreet Lights Collective CIC
Company number17300794
Approved byDirectors of Street Lights Collective CIC
Date approved[Insert date]
Review frequencyAnnually or sooner if the website, law, systems or organisational activities change
Next review date[Insert date]

Our full policy suite is available on request as part of your due diligence.

Request documentation