All Togetherly Different Privacy, Data Protection and GDPR Policy

Last Updated: July 8, 2026


1. Introduction


This Privacy Policy describes how All Togetherly Different CIC collects, stores, protects, and uses personal information in compliance with UK GDPR and the Data Protection Act 2018.


2. Types of Data Collected


We may collect:

  • Names, postal addresses, email addresses, phone numbers
  • Our correspondence and communications with you
  • Information about any complaints and enquiries you make to us
  • Volunteer and participant information
  • Event registrations
  • Images or Videos (with consent)
  • Information from research, surveys, and marketing information
  • Website cookies, IP addresses, analytics data


3. Lawful Basis for Processing


  • Consent: For communications and optional datasets.
  • Legitimate interests: Running community activities.
  • Legal Obligation: Safeguarding, financial reporting, and compliance.


4. How We Use Data


  • To manage participants in events and volunteering
  • To communicate updates (only with consent)
  • To meet safeguarding and legal responsibilities
  • To analyse website usage and improve services


5. Data Storage & Security


  • Data stored securely using password-protected systems
  • Access restricted to authorised committee members
  • No sharing with third parties unless:
  • Legally required
  • Consent has been given
  • Necessary for operational delivery


6. Data Retention


  • Contact data: until consent withdrawn
  • Volunteer/participant records: duration of involvement +2 years
  • Safeguarding records: minimum 7 years


7. Cookies (for Website Policy)


Our website uses:

  • Essential cookies
  • Optional analytics cookies

Users can manage cookie preferences upon visiting.


8. Your Rights


Individuals can request:

  • Access to personal data
  • Correction or deletion
  • Data portability
  • Withdrawal of consent

Requests should be made to: hello@alltogetherlydifferent.co.uk


9. Complaints


You may complain to the Information Commissioner's Office (ICO) if you believe your data has been mishandled.


10. Review


Annual review or earlier if required by legal changes.