This privacy notice explains how Home-Start London collects and uses information. This notice will be reviewed regularly and updated from time to time. The current policy was published in April 2023.

Privacy Notice Home-Start London

At Home-Start London, we are committed to protecting and respecting your privacy.

This Privacy Notice explains when and why we collect personal information about you, how we use it, the conditions under which we may disclose it to others, how we keep it safe and secure and your rights and choices in relation to your information.

Any questions regarding this notice and our privacy practices should be sent by email to director@home-startlondon.org  or by writing to Home-Start London, Stephens House, 17 East End Road, London, N3 3QE.

  • Who are we?
  • The personal data we collect from you, how we collect and how we use it
  • Your Rights
  • Keeping your information safe – IT security
  • Keeping your information up to date
  • 16 or Under
  • Vulnerable circumstances
  • Changes to this notice
  • Review of this notice
  • How to complain

Who are we?

Home-Start London is committed to protecting your personal information and to being transparent about what information we hold. Home-Start London understands its obligations to you to help you understand how and why we process your personal data. We will only do so in accordance with all applicable UK data protection legislation, including the General Data Protection Regulation. In this notice ‘Home-Start’, ‘we’, ‘us’ or ‘our’ means:

  • Home-Start London is a Charitable Incorporated Organisation
  • Charity no. 1161629, Registered office: UK Charity Commission

The personal data we may collect and retain, and how we may use it

Depending upon your relationship or association with us, we may collect and retain one or more of the following for the purposes of provision of our services and the administration of our organisation:

  • Name and contact details
  • Other identifiers (e.g. NI number, date of birth, photographs, photo ID, visas, legal documents, IP address)
  • Nationality and place of birth
  • Ethnicity
  • Disabilities and medical conditions
  • HR records
  • Employment details
  • Income and financial details
  • Bank account details
  • Payment card details
  • Website usage data
  • Emails and other communication data
  • Subscription data
  • Family member details including next of kin
  • Criminal convictions
  • Sexual orientation
  • Religion or beliefs
  • Political views
  • Other personal data as necessary for specific legitimate purposes

Where we have your consent, where we have a legal or statutory obligation to do so, or where it is in our legitimate interest to do so (e.g. for assisting with our support and service provision), we may share personal data with 3rd parties.

In compliance with the legislation, we will only process personal data if we can do so under one or more of the six “lawful bases for processing”, as defined in the legislation:

  1. Consent
  2. Contract
  3. Legal obligation
  4. Vital interests
  5. Public task
  6. Legitimate interests

We keep your information for no longer than is necessary for the purposes for which it was collected. The length of time we retain your personal information for is determined by operational and legal considerations. For example, we are legally required to hold some types of information to fulfil our statutory and regulatory obligations (e.g. health/safety and tax/accounting purposes). We review our retention periods on a regular basis.

We take measures to ensure that appropriate technical and organisational controls are in place to protect personal data, such as Firewalls, anti-virus protection and encryption.  Home-Start has developed a set of security policies that include device security, authentication requirements, acceptable usage of resources, data storage requirements.  We undertake regular reviews of who has access to information that we hold to ensure that your info is only accessible by appropriately trained staff, volunteers and contractors.

Your rights

Under UK data protection law, you have certain rights over the personal information that we hold about you. Here is a summary of the rights that are likely to apply to you when we are processing your personal information:

Right of access

You have a right to request access to the personal data that we hold about you. You also have the right to request a copy of the information we hold about you, and we will provide you with this unless legal exceptions apply. If you want to access your information, please contact us.

Right to have your inaccurate personal information corrected

You have the right to have inaccurate or incomplete information we hold about you corrected. The accuracy of your information is important to us so we are working on ways to make it easier for you to review and correct the information that we hold about you. In the meantime, if you change email address, or if you believe any of the other information we hold is inaccurate or out of date, please contact us.

Right to restrict use

You have a right to ask us to restrict the processing of some or all of your personal information if there is a disagreement about its accuracy, or we’re not lawfully allowed to use it.

Right of erasure

You may ask us to delete some or all of your personal information and in certain cases, and subject to certain exceptions, we will do so as far as we are required to by law. In many cases, we will anonymise that information, rather than delete it.

Right for your personal information to be portable

If we are processing your personal information (1) based on your consent, or in order to enter into or carry out a contract with you, and (2) the processing is being done by automated means, for example, when you shop from our website, you may ask us to provide it to you or another service provider in a machine-readable format.

Right to object

You have the right to object to processing where we are using your personal information based on legitimate interests, (or for statistical/research purposes).  In these circumstances we will consider your request against our legitimate reasons for continuing to process your information.

You have an absolute right to object to direct marketing.  If you wish to opt-out of receiving marketing materials from us at any time, please contact us.

If you want to exercise any of the above rights, please contact us. We may be required to ask for further information and/or evidence of identity. We will endeavour to respond fully to all requests within one month of receipt of your request, however if we are unable to do so we will contact you with reasons for the delay.

Please note that exceptions apply to a number of these rights, and not all rights will be applicable in all circumstances. For more details we recommend you consult the guidance published by the UK’s Information Commissioner’s Office.

For further information on your data rights, go to www.ico.org.uk

Keeping information up to date

We take reasonable steps to ensure your information is accurate and up to date. Where possible we use publicly available sources to identify deceased records or whether you have changed address. We really appreciate it if you let us know when your contact details change.

16 or under

We are concerned to protect the privacy of children aged 16 or under. If you are aged 16 or under‚ please get your parent/guardian’s permission before you provide us with personal information.

Vulnerable circumstances

We are committed to protecting vulnerable supporters, customers and volunteers, and appreciate that additional care may be needed when we use their personal information. In recognition of this, we observe good practice guidelines in our interactions with vulnerable people.

Changes to this notice

Any changes we may make to this notice in the future will be posted on our website so please check this page occasionally to ensure that you are happy with any changes. If we make any significant changes we will make this clear on our website.

Third party websites

Our website includes hyperlinks to, and details of, third party websites. This notice only governs our website and we are not responsible for the privacy policies that govern third party websites even where we have provided links to them.  If you use any link on our website we recommend you read the privacy notice of that website before sharing any personal or financial data

Social Media

We operate a number of social media pages including Facebook, LinkedIn and Instagram. Although this notice covers how we will use any data collected from those pages it does not cover how the providers of social media sites will use your information.  Please ensure you read the privacy notice of the social media site before sharing data and make use of the privacy settings and reporting mechanisms to control how your data is used.

Personal data of children

Our website and services are targeted at persons over the age of 16. If we have reason to believe that we hold personal data of a person under that age in our databases, we will delete that personal data.

Email/text/phone/post

We will only send you marketing and fundraising communications by email, text and telephone if you have explicitly provided your prior consent. You may opt out of our marketing communications at any time by clicking the unsubscribe link at the end of our marketing emails. We may send you marketing and fundraising communications by post unless you have told us that you would prefer not to hear from us.

We will not use your personal information for marketing purposes if you have indicated that you do not wish to be contacted and will retain your details on a suppression list to help ensure that we do not continue to contact you. However, we may still need to contact you for administrative purposes like where we are processing a donation or thanking you for your participation in an event.

Data breach procedures

We have put in place a Data Breach Management process to deal with any suspected data breach and will notify you and any applicable regulator of a breach where we are legally required to do so.

How to complain

Please report any complaint to us by email or letter. We hope we can resolve any query or concern you raise about our use of your information. You also have the right to submit a complaint to the ICO who may be contacted at https://ico.org.uk/concerns or telephone: 0303 123 1113.

How to contact us

Please contact us if you have any questions about this Privacy Notice or the information we hold about you:

Home-Start London

Stephens House, 17 East End Road, London, N3 3QE.

Website: www.home-startlondon.org

Email: Director@home-startlondon.org.uk

Our data protection lead is Esther Sample, Director, Home Start London

Review of this privacy notice

We keep this notice under regular review. This notice was last updated in December 2025.