Privacy Policy
Last updated: 19 April 2026
Play North West CIC (“we”, “us”) is committed to protecting your privacy. This policy explains what personal data we collect, why we collect it, and your rights under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
Who we are
Play North West CIC is a Community Interest Company registered in England & Wales (Company No. 15796794). We are the data controller for personal information collected through this website.
What we collect
When you contact us or book a place on a programme, we collect:
- Your name
- Your email address and/or phone number
- Programme(s) you are interested in
- Any additional information you choose to share with us (e.g. accessibility needs, parental consent for under-18s)
We do not use cookies, analytics trackers, or third-party advertising on this site.
Payments (Stripe)
Workshop deposits, donations, and Crisis Connect UK Premium subscriptions are processed by Stripe Payments Europe Ltd. We never see, store, or have access to your full card number, CVC, or expiry date. Stripe shares back to us only your name, email address, billing country, and the amount paid — the minimum we need to issue a receipt and (for Crisis Connect UK Premium) to enable Premium features in the app. Stripe acts as an independent data controller for the payment data you give them.
Crisis Connect UK app
Our Crisis Connect UK Progressive Web App stores your preferences locally on your device. The free crisis features (helplines, breathing, grounding, sounds, service finder) do not require an account and do not transmit personal data to us. If you subscribe to Premium, your email address is used to enable Premium features; wellbeing tracking and journaling data is stored locally on your device by default.
Reviews
If you submit a review on our Stories page, we collect your name, star rating, an optional email address, and the review text. Reviews help us improve our work and may be quoted (first name only) on the website or in funder reports unless you ask us not to.
Safeguarding records
Any safeguarding concern raised in connection with our work is recorded and stored as set out in our Safeguarding Policy. Where required by law, we will share information with statutory services (local authority MASH, the police, or the Local Authority Designated Officer) without your consent if a child or adult at risk is in danger.
Why we use it
We use your information to respond to enquiries, confirm bookings, keep you informed about the programme you have signed up for, and (where relevant) report anonymised participant numbers to funders.
Our lawful basis for processing is your consent (when you submit a form) and our legitimate interest in delivering the programmes you have requested.
How long we keep it
- Enquiry & booking data: up to 24 months after your last contact.
- Payment records: 6 years (UK accounting requirements).
- Programme participation & wellbeing data: up to 6 years for funder reporting, then anonymised or deleted.
- Safeguarding records: as set out in our Safeguarding Policy (typically 7 years for adults; longer for children in line with statutory guidance).
Anonymised, aggregate impact data (e.g. participant counts, wellbeing scores) may be retained indefinitely for reporting purposes.
Who we share it with
We do not sell or share your personal data with third parties for marketing. We share data only with:
- Service providers who help us run the CIC: Stripe (payments), our email host, and Amazon Web Services (website hosting in UK/EU).
- Statutory bodies where we have a legal duty to share — for example, safeguarding referrals to local authority MASH teams, the police, or the LADO.
- Funders — only anonymised, aggregated outcome data unless you have explicitly consented to share a named testimonial.
Your rights
Under UK GDPR you have the right to:
- Access the personal data we hold about you
- Request that we correct inaccurate data
- Request deletion of your data (the “right to be forgotten”)
- Request a copy of your data in a portable format
- Withdraw consent at any time
- Lodge a complaint with the Information Commissioner’s Office (ICO) at ico.org.uk
Contact us
For any privacy-related question or to exercise any of the rights above, please email hello@playnorthwestcic.com.