Privacy Policy - UK Youth

About this privacy notice

This privacy notice explains what types of personal information are collected when you engage with UK Youth, how we use it, and your rights. It applies to data collected through our websites (UK Youth and Avon Tyrrell), services, events, donations, and other activities.

By using or registering on our websites or engaging with our services, you consent to the collection, use, and transfer of your information as described in this notice.

Who we are

UK Youth is the data controller under the Data Protection Act 2018 and the UK General Data Protection Regulation (UK GDPR). Any data protection queries should be addressed to:

Data Protection Officer
c/o UK Youth
8-10 Grosvenor Gardens
London
SW1W 0DH

Email: data@ukyouth.org

What personal data we collect

When you use our websites, we may collect the following categories of personal data: name, date of birth, contact details (email, phone, address), employment and professional information, donation history and fundraising interests, communication preferences, event attendance and booking details, IP address, and browser information.

We collect this information through Direct interactions (e.g., registering, donating, emailing us, attending events), Third-party platforms (e.g., Eventbrite, PayPal, JustGiving), and automated technologies (e.g., cookies on our websites).

How we use your data

Where our use of personal data involves high-risk technologies such as Artificial Intelligence (AI), we carry out a Data Protection Impact Assessment (DPIA) to assess and mitigate risks to your rights.
We process your data for the following purposes:

To provide services and support to young people and youth workers
To manage bookings, memberships, and training
To send you updates, newsletters, and fundraising appeals (where permitted)
To maintain our internal records and accounts
To analyse supporter engagement and improve communication
To conduct supporter profiling and fundraising research (see below)
To comply with legal and regulatory obligations

Fundraising, supporter profiling & wealth research

UK Youth may use supporter profiling and wealth research to ensure our fundraising is respectful, targeted, and cost-effective. This activity helps us identify individuals who may be interested in supporting youth, giving a significant gift or forming a strategic partnership.

This may involve combining the information you’ve given us with publicly available data (e.g. Companies House, Charity Commission, press coverage, or professional sites such as LinkedIn). We may also work with trusted third-party agencies — like Prospecting for Gold or Factary — who support this work under strict data protection agreements.

This processing is done based on legitimate interest and is subject to safeguards to protect your rights. We do not use this information to make automated decisions about you without human involvement. You can object to this type of profiling at any time by contacting us.

Lawful basis for processing

We process personal data under the following legal bases:

Consent – where you have given explicit permission (e.g. to receive emails)
Contract – to deliver a service you have requested
Legal obligation – where we must comply with the law
Legitimate interest – where we have a justifiable reason that does not override your rights (e.g. donor research, service improvement)

We always balance our interests against your rights and expectations. You can request more information on this assessment by contacting our Data Protection Officer.

Children and young people

We are committed to protecting children’s privacy. Where services are likely to be accessed by those under 16, we:

provide clear notices to deter data sharing without parental consent
avoid knowingly collecting data from under-16s for marketing purposes
require parental/guardian consent where appropriate

If you are a parent or guardian concerned about your child’s data, don’t hesitate to contact us.

Cookies and online tracking

Our websites use cookies to enhance user experience and collect analytics. These include:

Essential cookies (e.g. site navigation)
Analytics cookies (e.g. to understand usage).

We use a cookie banner to request your consent where required. You can manage your preferences via your browser or through our cookie settings.

Data sharing and trusted partners

We do not sell or swap your data. We only share your information when:

required to deliver a service (e.g. with event or donation platforms)
working with trusted suppliers who process data on our behalf
legally required (e.g. for fraud prevention or regulatory reporting).

All third parties are subject to data protection agreements and must meet our security standards.

International transfers

Some of our services (e.g. cloud platforms) involve storing data outside the UK or EEA. In such cases, we ensure appropriate safeguards, including standard contractual clauses or adequacy decisions, are in place.

Data security and retention

We use appropriate technical and organisational measures to protect your data against loss, misuse, or unauthorised access. We retain personal data only as long as necessary for our purposes and in line with our Records Retention Schedule.

Your rights

You have the following rights under data protection law:

To request a copy of your data (Subject Access Request)
To have incorrect or outdated data corrected
To have your data erased where it is no longer needed
To withdraw consent at any time
To object to processing (including automated decision-making, including AI and profiling or direct marketing)
To challenge decisions made solely by automated means (including AI or profiling), and to request human intervention, explanation, and reconsideration – To restrict certain types of processing – To request data portability – To complain with the Information Commissioner’s
Office (https://ico.org.uk)
To object to certain types of processing, including profiling (such as wealth research) and automated decision-making, and to request a human review where appropriate.
To receive clear information if we use technology that may significantly affect you — including profiling or AI.
To exercise your rights or ask questions, don’t hesitate to email data@ukyouth.org or write to our Data Protection Officer.

Updates and further processing

If we plan to use your data for a new purpose not covered by this notice, we will update this notice, inform you, and, where necessary, seek your consent. We encourage you to check this page periodically to stay informed of changes.

Contact us

To exercise your rights, ask questions, or raise concerns, contact:

Data Protection Officer
UK Youth
8-10 Grosvenor Gardens
London
SW1W 0DH

Email: data@ukyouth.org
ICO Website: https://ico.org.uk