Data Protection and Privacy Policy

1. Introduction

Uplift Adult and Youth Community Interest Company (CIC) is committed to protecting the privacy and confidentiality of personal data collected from individuals associated with our organization. This Data Protection and Privacy Policy outlines how we collect, use, disclose, and protect personal data in compliance with relevant data protection laws and regulations.

2. Policy Statement

We will:

Collect and process personal data lawfully, fairly, and transparently.
Use personal data only for specified and legitimate purposes.
Maintain accurate and up-to-date personal data and delete it when no longer necessary.
Implement appropriate security measures to safeguard personal data from unauthorized access or disclosure.
Respect the rights of individuals regarding their personal data.

3. Data Collection and Use

Uplift Adult and Youth CIC collects and processes personal data for the following purposes:

Managing employee and volunteer information, including contact details and qualifications.
Providing services and support to beneficiaries and maintaining relevant records.
Facilitating communication with stakeholders and responding to inquiries.
Complying with legal and regulatory requirements.

4. Lawful Basis for Data Processing

We process personal data based on one or more of the following lawful bases:

Consent: When individuals have provided explicit consent for specific processing purposes.
Contractual Obligations: When data processing is necessary to fulfill contractual agreements with employees, volunteers, or service recipients.
Legal Obligations: When processing is required to comply with legal or regulatory obligations.
Legitimate Interests: When processing is necessary for our legitimate interests, provided that it does not override the interests, rights, and freedoms of individuals.

5. Data Sharing and Disclosure

Uplift Adult and Youth CIC will not disclose personal data to third parties unless:

It is necessary to provide services or support to beneficiaries, and explicit consent has been obtained.
It is required by law or a legal authority.
It is necessary to protect the vital interests of an individual.
It is essential for the legitimate interests pursued by the organization.

6. Data Security

We have implemented appropriate technical and organizational measures to protect personal data from unauthorized access, alteration, disclosure, or destruction. We regularly review and update our security measures to ensure their effectiveness.

7. Data Retention

Personal data will be retained only for as long as necessary to fulfill the purposes for which it was collected or as required by law. When data is no longer required, it will be securely deleted or anonymized.

8. Data Subject Rights

Individuals have the right to:

Access their personal data held by Uplift Adult and Youth CIC.
Rectify inaccuracies in their personal data.
Withdraw consent for processing, where applicable.
Object to the processing of their personal data for specific purposes.
Erase their personal data (the right to be forgotten), subject to legal obligations.

9. Designated Data Protection Officer

Naima Mohamed Ali serves as the Designated Data Protection Officer (DPO) and is responsible for:

Ensuring compliance with data protection laws and regulations.
Handling data protection inquiries and requests.
Monitoring and reviewing data protection practices within the organization.

10. Data Breach Notification

In the event of a data breach involving personal data, Uplift Adult and Youth CIC will promptly assess the risks and notify affected individuals and the appropriate data protection authorities, as required by law.

11. Communication and Consent

Uplift Adult and Youth CIC will communicate this Data Protection and Privacy Policy to all employees, volunteers, beneficiaries, and stakeholders. We will obtain explicit consent when necessary for specific data processing activities.

12. Review and Improvement

This Data Protection and Privacy Policy will be reviewed periodically to ensure its effectiveness and compliance with changes in data protection laws or regulations. Uplift Adult and Youth CIC will continuously strive to improve its data protection practices.

13. Contact Information

For any questions or concerns related to data protection and privacy, please contact the Designated Data Protection Officer.

14. Conclusion

Uplift Adult and Youth CIC is committed to protecting the privacy and confidentiality of personal data in accordance with applicable data protection laws. We value the trust placed in us by individuals associated with our organization and will continue to uphold the highest standards of data protection and privacy.

Signed: Naima Mohamed Ali
Date: 17/04/2025