Privacy statement
Last Updated: 2026
At Grow to Change, we are committed to protecting and respecting your privacy. In accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018, this privacy statement explains how we collect, use, and safeguard your personal data when you visit our website or interact with our services.
1. Information we collect
We may collect and process the following types of personal information:
Information you provide directly: This includes details you submit via contact forms, newsletter sign-ups, or programme registrations (such as your name, email address, phone number, and any details about your inquiry).
Automated information: When you visit our website, we may automatically collect technical data, including your IP address, browser type, and how you interact with our pages (collected via cookies and analytics).
2. How we use your information
We use the information we collect to deliver our mission of community empowerment and support. Specifically, we use it to:
Provide you with information about our mentoring, education, wellbeing, and community programmes.
Respond to your inquiries, feedback, or requests for support.
Improve our website experience and monitor website performance.
Send you updates or newsletters, provided you have given us explicit consent to do so.
3. Legal basis for processing
Under the UK GDPR, we only process your personal data when we have a lawful basis to do so, which may include:
Consent: Where you have explicitly agreed to let us process your data (e.g., subscribing to a newsletter).
Legitimate interests: Where it is necessary for our legitimate organizational interests to run our website and deliver our services safely and effectively.
Legal obligation: Where we are required by law to comply with statutory regulations.
4. Data sharing and security
We respect your privacy and never sell your personal data to third parties. We may only share your information with trusted third-party service providers (such as website hosting or email delivery platforms) who assist us in operating our organisation, and who are contractually bound to keep your data secure.
We employ strict security measures to protect your personal data from unauthorised access, loss, or alteration.
5. Your rights
Under UK data protection laws, you have specific rights regarding your personal information, including:
The right to access the personal data we hold about you.
The right to request the correction of inaccurate data.
The right to request the deletion of your data (the "right to be forgotten").
The right to withdraw your consent to marketing or communications at any time.
6. Contact us
If you have any questions about this Privacy Statement, or if you wish to exercise any of your data protection rights, please contact us by completing the form below.