Privacy Policy

If you have any questions about this policy, please contact us using the details provided in our Contact Us section below.

This privacy policy was last updated in October 2025.

Reaching CIC (“we”, “us”, “our”) is a Community Interest Company (CIC) that operates in the United Kingdom to support adults aged 16 and over through our services and volunteering programmes.

We are the Data Controller, which means we are responsible for deciding how personal information is used and ensuring it is handled lawfully.

Registered office: Reaching CIC, Lymedale Court Enterprise Centre, Dalewood Road, Lymedale Business Park, ST5 9QH.
Email address: help@reaching.org.uk
Telephone: 0330 016 9016
Data Protection Lead: Georgina Salt

We are not legally required to appoint a Data Protection Officer, but we have chosen a Data Protection Lead as the main contact point for data protection issues.

Reaching CIC complies with:

• UK General Data Protection Regulation (UK GDPR)
• Data Protection Act 2018
• Privacy and Electronic Communications Regulations (PECR)(this applies when we send electronic marketing messages, such as email or text messages)

We follow the Information Commissioner’s Office (ICO) guidance on how to respond to data protection rights. Normally, we respond within 1 calendar month of receiving a request. If a request is particularly complex, we may extend this by up to 2 additional calendar months, but we will always inform the person within the first month.

Depending on how you use our services, the types of information we collect from you might include:

• Your full name and date of birth
• Contact details including your address, telephone number, and email address
• National Insurance number
• Your bank details
• Records of your correspondence and engagement with us
• Donation history
• Information you may enter on our website
• Photographs, video or audio recordings
• Occupation
• Emergency contact details
• Basic demographic information (such as age, gender, or background, where this is relevant to our work)
• Referral information and reasons for accessing support
• Notes of support sessions, progress, and outcomes
• Risk assessments and safeguarding information

Some of the reasons why we might collect your data include:

• To provide support, keep people safe, meet our legal safeguarding duties, and improve our services.
• To administer services we are providing to you.
• To communicate with you regarding our work, fundraising and campaigning activities
• To process donations
• To provide you with information about and to administer events
• To manage your communication preferences
• To process job applications or volunteer applications
• To conduct surveys, research and gather feedback
• To address and resolve complaints
• To comply with applicable laws and regulations
• To manage a job or volunteer role and ensure safe working practices

This may include health details, ethnicity, or other sensitive personal information. We only collect this when it is necessary and proportionate, for example:

• To safeguard someone at risk and/or staff members
• To provide appropriate support
• Where you have given explicit consent

We only send marketing (such as newsletters or updates) if:

• You have given us consent, or
• You are already a supporter and we are contacting you about something similar to what you previously agreed to, and you have not opted out

You can stop marketing messages at any time by telling emailing us at help@reaching.org.uk

We only share information when it is necessary. The personal information we collect about you will mainly be used by our staff and volunteers.

We will never sell or share your personal information with organisations so they can contact you for marketing purposes. We do not sell information about your web browsing activity.

The organisations we might share your information with include:

• Funders (we normally provide aggregated or anonymous information)
• Statutory bodies such as local safeguarding boards
• HM Revenue and Customs (HMRC) for tax purposes
• Payroll and accounting providers
• Secure IT or cloud providers we have contracts with
• Trusted service providers
• The police or law enforcement if required by law

We may disclose your information if required to do so by law.

If we need to transfer information outside the United Kingdom, we will make sure appropriate legal safeguards are in place.

We take looking after your information very seriously. We use appropriate technical and organisational measures to protect your data.

Unfortunately, the transmission of information via the internet is not completely secure. Although we will do our best to protect your personal data, we cannot guarantee the security of your data transmitted to our website. We use strict procedures and security features to try to prevent unauthorised access.

Our website may contain links to other websites. We are not responsible for the content, privacy statements and security measures employed by other websites.

You have the right to:

• Access your information
• Correct inaccurate information
• Ask for deletion of your information (“right to be forgotten”)
• Restrict or object to how your data is used
• Receive a copyof your data in a usable format
• Withdraw consent, if we are relying on consent as the reason for using your data

If you wish to exercise any of these rights or make a complaint, you can do so by emailing help@reaching.org.uk or by writing to us at Reaching CIC, Lymedale Court Enterprise Centre, Dalewood Road, Lymedale Business Park, ST5 9QH. We will respond within 1 calendar month, or 3 calendar months if the request is very complex.

If you are unhappy with how we handle your information, you can complain directly to the Information Commissioner’s Office (ICO).

Please note, some of these rights only apply in certain circumstances. Where one of your rights does not apply, we will communicate the reason/s to you. There is no charge for requesting a copy of the information we hold about you, unless the request is excessive.

We will only store your information for a specified amount of time, as set out in our internal privacy policy.

Your communications with our teams (including by telephone or email) may be monitored and/or recorded for training, quality control and compliance purposes to ensure that we continuously improve our customer service standards.

To find out more about this Privacy Policy and how we look after your personal information, contact our Marketing/Communications team at: help@reaching.org.uk

For further information about our privacy policy, please contact us by any of the following methods:

Writing to us: Reaching CIC, Lymedale Court Enterprise Centre, Dalewood Road, Lymedale Business Park, ST5 9QH.

Calling us: 0330 016 9016

Emailing us: help@reaching.org.uk