Privacy Policy
Last updated: 22 April 2026
Data protection at a glance
- Data controller: Play Northwest CIC, Company No. 15796794
- Contact: hello@playnorthwestcic.com
- We never sell your data and we never share it for marketing
- Stripe handles all payment data — we never see your card number
- Browser storage is on your device by default (admin tokens, app preferences) — see “Browser storage” below
- Your rights: access, correct, delete, port or restrict your data — just email us
- Complaints: the Information Commissioner’s Office at ico.org.uk
Play Northwest CIC (“we”, “us”) is committed to protecting your privacy. This policy explains what personal data we collect, why we collect it, and your rights under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
Who we are
Play Northwest CIC is a Community Interest Company registered in England & Wales (Company No. 15796794). We are the data controller for personal information collected through this website.
What we collect
When you contact us or book a place on a programme, we collect:
- Your name
- Your email address and/or phone number
- Programme(s) you are interested in
- Any additional information you choose to share with us (e.g. accessibility needs, parental consent for under-18s)
Browser storage we use is described below in the “Browser storage” section.
Payments (Stripe)
Workshop deposits, donations, and Connect & Support UK Premium subscriptions are processed by Stripe Payments Europe Ltd. We never see, store, or have access to your full card number, CVC, or expiry date. Stripe shares back to us only your name, email address, billing country, and the amount paid — the minimum we need to issue a receipt and (for Connect & Support UK Premium) to enable Premium features in the app. Stripe acts as an independent data controller for the payment data you give them.
Connect & Support UK app
Our Connect & Support UK Progressive Web App stores your preferences locally on your device. The free crisis features (helplines, breathing, grounding, sounds, service finder) do not require an account and do not transmit personal data to us. If you subscribe to Premium, your email address is used to enable Premium features; wellbeing tracking and journaling data is stored locally on your device by default.
Reviews
If you submit a review on our Stories page, we collect your name, star rating, an optional email address, and the review text. Reviews help us improve our work and may be quoted (first name only) on the website or in funder reports unless you ask us not to.
Safeguarding records
Any safeguarding concern raised in connection with our work is recorded and stored as set out in our Safeguarding Policy. Where required by law, we will share information with statutory services (local authority MASH, the police, or the Local Authority Designated Officer) without your consent if a child or adult at risk is in danger.
Browser storage we use
We use a small amount of browser localStorage (a per-device store, like cookies but never sent to a server) only when it’s strictly necessary to deliver a feature you’ve actively requested:
| Where | What | Purpose | When it’s set |
|---|---|---|---|
| /admin/ | playnw_admin_token, playnw_admin_email | Keeps admin staff signed in for 7 days | When an authorised user signs in to the admin area |
| Site-wide | playnw_cookies_ack | Records that you’ve seen the cookies disclaimer | First visit, when you click “OK, got it” |
| Site-wide | playnw_tts_rate | Remembers your preferred read-aloud speed | When you change the speed on the read-aloud button |
These items live entirely on your device. We never read them from a server. You can clear them at any time from your browser’s privacy / cookies settings.
What we do NOT use:
- Third-party advertising or marketing pixels (no Meta, Google or TikTok pixels)
- Cross-site tracking cookies
- Any analytics package today (if we add a privacy-friendly tool such as Plausible in future, this page will be updated and the cookies disclaimer re-shown)
- Session recording or heatmap tools
Read-aloud feature: the speaker button at the bottom-left of every page uses your device’s built-in voice (Siri / Google / Microsoft) to read the page out loud. No audio, text, or usage data leaves your device.
Why we use it
We use your information to respond to enquiries, confirm bookings, keep you informed about the programme you have signed up for, and (where relevant) report anonymised participant numbers to funders.
Our lawful basis for processing is your consent (when you submit a form) and our legitimate interest in delivering the programmes you have requested.
How long we keep it
- Enquiry & booking data: up to 24 months after your last contact.
- Payment records: 6 years (UK accounting requirements).
- Programme participation & wellbeing data: up to 6 years for funder reporting, then anonymised or deleted.
- Safeguarding records: as set out in our Safeguarding Policy (typically 7 years for adults; longer for children in line with statutory guidance).
Anonymised, aggregate impact data (e.g. participant counts, wellbeing scores) may be retained indefinitely for reporting purposes.
Who we share it with
We do not sell or share your personal data with third parties for marketing. We share data only with:
- Service providers who help us run the CIC: Stripe (payments), our email host, and Amazon Web Services (website hosting in UK/EU).
- Statutory bodies where we have a legal duty to share — for example, safeguarding referrals to local authority MASH teams, the police, or the LADO.
- Funders — only anonymised, aggregated outcome data unless you have explicitly consented to share a named testimonial.
Your rights
Under UK GDPR you have the right to:
- Access the personal data we hold about you
- Request that we correct inaccurate data
- Request deletion of your data (the “right to be forgotten”)
- Request a copy of your data in a portable format
- Withdraw consent at any time
- Lodge a complaint with the Information Commissioner’s Office (ICO) at ico.org.uk
Contact us
For any privacy-related question or to exercise any of the rights above, please email hello@playnorthwestcic.com.