Privacy Policy

Last updated: 28 October 2025

1. Data Controller

This Privacy Policy explains how NoTude Just Chill™ Community Interest Company ("we", "us", or "our") collects, uses, and protects your personal information. We are the Data Controller of your information under the UK General Data Protection Regulation (UK GDPR).

2. Contact Details

If you have any questions about this notice or how we use your data, you can contact us at:

Telephone: 07588 028192

Email: notude.justchill@gmail.com

3. What Information We Collect and Why

We collect and use personal information for the following purposes:

A. To provide services and goods, including delivery and third-party referrals:

Names and contact details

Postal addresses

Website usage data (including cookie tracking and user journey information)

Information related to compliments or complaints

B. To receive donations or funding and organise fundraising activities:

Names and contact details

Postal addresses

Payment or banking details

Donation history

Taxpayer information (for Gift Aid)

C. To handle queries, complaints, or claims:

Names and contact details

Address

Client account and service records

Financial transaction data

Correspondence

D. To work with children and young people:

As part of our youth-focused programmes, we may collect limited personal information about or from young people under the age of 18, including:

First name or initials

Age range or school year

General wellbeing or support needs (where relevant and with appropriate consent)

Parent or guardian contact details (when required)

We do not knowingly collect personal data directly from children under 13 without verified parental or guardian consent. All data concerning young people is handled securely and in line with safeguarding best practices.

4. Lawful Bases for Processing

Under the UK GDPR, we must have a valid reason ("lawful basis") to use your personal data. The bases we rely on are:

Providing services and third-party referrals:

Consent – You gave us clear permission to process your information.

Receiving donations, funding, and organising fundraising:

Consent – You agreed to your information being used for these purposes.

Handling queries, complaints, or claims:

Consent – You authorised us to use your data to respond to your query or concern.

Working with children and young people:

Consent – We obtain consent from the young person’s parent, guardian, or referring organisation.

Legitimate interest or public task – In some cases (e.g. partnership with schools or safeguarding agencies), we rely on public task or legitimate interest to deliver community benefit.

You may withdraw your consent at any time by contacting us using the details above.

5. Cookies and Website Tracking

Our website may use cookies and similar technologies to:

Improve your browsing experience

Understand how users interact with the site

Measure and improve our services

Where required, we ask for your consent to use non-essential cookies. You can manage your preferences via your browser settings. For more details, please refer to our separate [Cookie Policy] (if applicable) or contact us for more information.

6. Third-Party Services and Data Sharing

We may share your personal data with trusted third-party service providers who help us:

Process donations

Deliver services

Host our website or app

Manage communications (e.g. Mailchimp, Zoom, Google, Stripe)

These providers only use your information to perform agreed tasks and must keep your data secure and comply with UK data protection law. We do not sell or trade your data.

7. International Data Transfers

Some third-party providers we use (e.g. Google, Meta, Zoom) may store or process your data outside the UK. When this occurs, we ensure appropriate safeguards are in place, including:

UK adequacy decisions

Standard Contractual Clauses (SCCs) approved by the Information Commissioner’s Office

We always ensure your data is treated securely and lawfully.

8. Security of Your Information

We take data security seriously and use appropriate technical and organisational measures to:

Prevent unauthorised access, use, or disclosure

Protect against accidental loss, destruction, or damage

These measures include secure storage, access controls, staff training, and regular review of data protection practices.

9. Your Data Protection Rights

You have a number of rights under data protection law, including:

Right of access – Request copies of your personal data

Right to rectification – Ask us to correct inaccurate or incomplete data

Right to erasure – Ask us to delete your data (in certain cases)

Right to restrict processing – Ask us to limit how we use your data

Right to object – Object to certain types of processing

Right to data portability – Ask us to transfer your data to you or another provider

Right to withdraw consent – Where consent is the lawful basis, you can withdraw it at any time

We will respond to your request within one month. Learn more about your rights at the ICO website.

10. Where We Get Your Information

We collect personal data from:

You directly (e.g. forms, emails, donations, registration)

Authorised organisations (e.g. schools, funders, referral agencies)

Website interactions and digital tools

11. How Long We Keep Your Information

We keep your personal data only as long as necessary for:

The purpose it was collected

Legal, regulatory, or safeguarding obligations

Resolving disputes or enforcing agreements

Once no longer needed, your data will be securely deleted or anonymised in line with our data retention policy.

12. How to Complain

If you have any concerns about how we use your personal data, please contact us directly:

Telephone: 07588 028192

Email: notude.justchill@gmail.com

If you are not satisfied with our response, you can raise a complaint with the Information Commissioner’s Office (ICO):

Information Commissioner’s Office
Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF

Helpline: 0303 123 1113

Website: https://www.ico.org.uk/make-a-complaint