1. Who We Are

Elev8 Journeys Wellbeing CIC (“we”, “us”, “our”) is a Community Interest Company registered in England and Wales (Company No. 17009408). We deliver social and emotional learning (SEL) programmes for children aged 7–13 in schools, youth centres, and community organisations across the UK.

We are the data controller for the personal information we collect and process.

2. What This Policy Covers

This Privacy Policy explains:

• What personal data we collect and why
• How we use it
• Who we share it with
• How long we keep it
• Your rights under UK GDPR and the Data Protection Act 2018

This policy applies to:

• Visitors to our website (elev8journeys.com)
• Schools, youth centres, and partner organisations that book our programmes
• Children who participate in our programmes (see Section 9)
• Parents and guardians
• Anyone who contacts us directly

3. What Personal Data We Collect

3.1 Website visitors

When you visit our website, we may collect:

• Usage data — pages viewed, time spent, browser type, device type, and IP address (via cookies — see our Cookie Policy)
• Contact form data — name, email address, organisation name, and the content of your message

3.2 Schools and partner organisations

When you book a programme or enquire about our services, we collect:

• Contact name and job title
• School/organisation name and address
• Email address and phone number
• Billing and payment information (processed securely by our payment provider)
• Programme and cohort details

3.3 Children and young people

We process limited data about children who participate in our programmes. This data is collected through the school or organisation that commissions our services, not directly from children or their families. See Section 9 for full details.

3.4 Parents and guardians

If you contact us directly about your child’s participation, we collect:

• Your name and contact details
• The nature of your enquiry

4. Legal Basis for Processing

We process personal data under the following lawful bases:

Where we process special category data (such as SEMH needs or SEN information), we rely on substantial public interest under Schedule 1, Part 2 of the Data Protection Act 2018, specifically the delivery of healthcare and social care equivalent support services to children.

5. How We Use Your Data

We use personal data to:

• Respond to enquiries and provide information about our programmes
• Administer bookings and deliver our SEL programmes
• Issue invoices and process payments
• Communicate programme details, session dates, and relevant updates
• Monitor and evaluate programme outcomes (using anonymised or aggregated data where possible)
• Comply with our legal obligations as a CIC
• Improve our website and services

We do not use personal data for automated decision-making or profiling.

6. Who We Share Data With

We do not sell personal data. We may share data with:

• Programme delivery staff and associates — to enable safe, effective delivery of sessions
• IT and software providers — such as our website hosting provider, email platform, and payment processor, all operating under data processing agreements
• Regulatory or statutory bodies — if required by law, court order, or to protect the safety of a child (see Section 9)

All third parties with whom we share data are required to handle it securely and in accordance with UK data protection law.

7. Data Retention

We retain personal data only for as long as necessary:

After the applicable retention period, data is securely deleted or anonymised.

8. Data Security

We take the security of your personal data seriously. We use appropriate technical and organisational measures, including:

• Secure, password-protected systems
• Encryption of data in transit (HTTPS)
• Restricted access on a need-to-know basis
• Regular review of our security practices

If we become aware of a data breach likely to affect your rights and freedoms, we will notify the ICO within 72 hours and inform affected individuals without undue delay, as required by UK GDPR.

9. Children’s Data

We take particular care when processing data relating to children.

What we collect: As part of programme delivery, we may receive from schools or organisations: first names (for register/grouping purposes); year group and age; relevant SEMH/SEN information shared by the school; and baseline and endline assessment scores measuring social and emotional outcomes.

How it is collected: Data is provided by the commissioning school or organisation, not collected directly from children. Consent for a child’s participation is obtained by the school or organisation from parents/guardians.

How we use it: Children’s data is used solely to deliver the programme effectively and to measure its impact. Outcome data is reported in anonymised or aggregated form only.

Sharing: We do not share children’s personal data with third parties except where required to safeguard a child. In such cases, we will share information with the appropriate statutory authority without delay.

10. Your Rights

Under UK GDPR, you have the following rights:

• Right to access — request a copy of the personal data we hold about you
• Right to rectification — ask us to correct inaccurate data
• Right to erasure — ask us to delete your data where there is no longer a lawful basis to hold it
• Right to restrict processing — ask us to pause processing in certain circumstances
• Right to data portability — request your data in a machine-readable format (where applicable)
• Right to object — object to processing based on legitimate interests
• Right to withdraw consent — where we rely on consent, you can withdraw at any time

To exercise any of these rights, contact us at support@elev8journeys.com. We will respond within one calendar month.

11. Cookies

We use cookies on our website. Please see our separate Cookie Policy for full details.

12. Third-Party Links

Our website may contain links to third-party websites. We are not responsible for their privacy practices and encourage you to read their own privacy policies.

13. Changes to This Policy

We may update this Privacy Policy from time to time. The date at the top of this page will always reflect the most recent version. For significant changes, we will post a notice on our website.

14. How to Complain

If you have concerns about how we handle your personal data, please contact us first at support@elev8journeys.com.

If you remain unsatisfied, you have the right to lodge a complaint with the Information Commissioner’s Office (ICO):

• Website: https://ico.org.uk
• Phone: 0303 123 1113
• Post: Information Commissioner’s Office, Wycliffe House, Water Lane, Wilmslow, SK9 5AF