Data Protection (UK GDPR)

What We Think CIC is committed to handling personal information in line with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

Our principles

• We collect only the information we need
• We use it only for the purposes we tell you about
• We keep it secure and confidential
• We retain it only for as long as necessary
• We respect your rights as a data subject

Special category data

Because of the nature of our work, we may process information about your health, mental wellbeing, or experiences of abuse. This is treated as special category data under UK GDPR. We process this data on the basis of your explicit consent and our safeguarding responsibilities.

Your rights

You can request access to, correction of, or deletion of your personal information at any time. You can also withdraw consent or complain to the Information Commissioner’s Office.

More detail

Full information about how we use personal data is in our Privacy Policy.