Privacy policy

Empower Devon CIC (“we”, “our”, “us”) is a Community Interest Company registered in England and Wales.

As a Community Interest Company, we exist to benefit the community. We are committed to protecting your personal data and respecting your privacy in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

Data Controller: Empower Devon CIC
Registered Address: 29 Swallow Rise, Westward Ho! EX39 1GL
Email: samwatts@empowerdevon.co.uk
Company Number: 17029343

We may collect and process the following personal data:

• Full name
   
• Email address
   
• Telephone number
   
• Postal address
   
• Information submitted through contact forms
   
• Information provided when registering for events, programmes, or services
   
• Feedback, survey responses, or enquiries
   

When you use our website, we may automatically collect:

• IP address
   
• Browser type and version
   
• Device information
   
• Pages visited and time spent on our site
   
• Referring website addresses

In some cases (for example, when delivering community support services), we may collect limited sensitive personal data (such as health or wellbeing information). We will only do this where necessary, lawful, and with your explicit consent where required.

We use your information to:

• Respond to enquiries
   
• Deliver community programmes and services
   
• Manage event registrations and bookings
   
• Communicate updates about our work
   
• Send newsletters (where you have opted in)
   
• Monitor and improve our services
   
• Meet legal and regulatory obligations

Under UK GDPR, we rely on one or more of the following lawful bases:

• Consent – where you have given clear permission
   
• Contract – where processing is necessary to deliver a service
   
• Legal obligation – where we must comply with the law
   
• Legitimate interests – where it is necessary for our charitable and community objectives

We do not sell your personal data.

We may share your information with:

• Trusted service providers (e.g., website hosting providers, IT support)
   
• Funding bodies (in anonymised or aggregated form where possible)
   
• Professional advisers (e.g., legal or accounting services)
   
• Regulatory authorities where required by law
   

All third parties are required to keep your data secure and only process it in accordance with data protection laws.

We take appropriate technical and organisational measures to protect your personal data against:

• Unauthorised access
   
• Loss or misuse
   
• Alteration or disclosure
   

Access to personal data is limited to those who have a genuine need to know.

We retain personal data only for as long as necessary to:

• Provide services
   
• Meet funding requirements
   
• Comply with legal obligations
   

Retention periods vary depending on the type of data and legal requirements.

Under UK GDPR, you have the right to:

• Request access to your personal data
   
• Request correction of inaccurate data
   
• Request erasure (“the right to be forgotten”)
   
• Restrict processing
   
• Object to processing
   
• Request data portability
   
• Withdraw consent at any time (where consent is relied upon)
   

To exercise your rights, please contact us at:
samwatts@empowerdevon.co.uk

You also have the right to lodge a complaint with the UK’s data protection regulator:

Information Commissioner’s Office (ICO)
Website: https://www.ico.org.uk

Our website may use cookies to:

• Ensure the website functions correctly
   
• Understand how visitors use our site
   
• Improve user experience
   

You can control cookies via your browser settings. If we use non-essential cookies (such as analytics), we will request your consent through a cookie banner.

Our website may include links to third-party websites. We are not responsible for the privacy practices of those websites.

If we provide services to young people, we take additional care to protect their data. Where required, parental or guardian consent will be obtained.

We may update this Privacy Policy from time to time. Updates will be posted on this page with a revised effective date.