Privacy Policy

Introduction

Safe Haven Mental Health Project ("we", "us", or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website safehavenmh.co.uk and interact with our services.

1. Information We Collect

1.1 Personal Information You Provide

We may collect personal information that you voluntarily provide to us when you:

• Fill out a contact form
• Register for events or activities
• Make a donation
• Subscribe to our newsletter
• Volunteer with us
• Contact us via email or phone

This information may include:

• Name and contact details (email address, phone number, postal address)
• Donation information (amount, payment details processed by third-party payment processors)
• Event registration information
• Volunteer information and preferences
• Any other information you choose to provide

1.2 Automatically Collected Information

When you visit our website, we may automatically collect certain information about your device, including:

• Browser type and version
• Operating system
• IP address
• Pages visited and time spent on pages
• Referring website addresses
• Date and time of visits

This information is collected through cookies and similar tracking technologies. See our Cookie Policy for more details.

1.3 Sensitive Information

2. How We Use Your Information

We use the information we collect for the following purposes:

3. Legal Basis for Processing (UK GDPR)

Under UK GDPR, we process your personal data based on the following legal grounds:

• Consent: When you provide explicit consent (e.g., newsletter sign-up)
• Contract: To fulfill our obligations when you register for events or make donations
• Legitimate Interests: To operate our charity, improve our services, and communicate about our activities
• Legal Obligation: To comply with legal and regulatory requirements

4. How We Share Your Information

We do not sell, rent, or trade your personal information. We may share your information in the following circumstances:

4.1 Service Providers

We may share information with third-party service providers who help us operate our website and deliver services, including:

• Payment processors (for donations)
• Email service providers (for newsletters)
• Website hosting providers
• Analytics providers (e.g., Google Analytics)

These providers are contractually obligated to keep your information secure and use it only for the purposes we specify.

4.2 Legal Requirements

We may disclose your information if required by law, court order, or governmental authority, or to protect our legal rights.

4.3 Partner Organizations

With your explicit consent, we may share information with partner mental health organizations for specific programs or services.

5. Data Retention

We retain your personal information only for as long as necessary to fulfill the purposes outlined in this policy, unless a longer retention period is required by law.

• Contact form enquiries: 2 years after last contact
• Donation records: 7 years (required for charity accounting)
• Newsletter subscriptions: Until you unsubscribe
• Event registrations: 2 years after the event
• Website analytics: 26 months (Google Analytics default)

6. Your Rights

Under UK GDPR and the Data Protection Act 2018, you have the following rights:

7. Data Security

We implement appropriate technical and organizational measures to protect your personal information, including:

• Secure server hosting with SSL/TLS encryption
• Access controls and authentication
• Regular security assessments
• Staff training on data protection
• Secure backup procedures

8. Third-Party Websites

Our website may contain links to third-party websites (e.g., social media, external resources). We are not responsible for the privacy practices of these websites. We encourage you to review their privacy policies.

9. Children's Privacy

Our website is not intended for children under 16. We do not knowingly collect personal information from children. If you believe we have collected information from a child, please contact us immediately.

10. International Data Transfers

Your information may be transferred to and processed in countries outside the UK, including:

• European Economic Area (EEA)
• United States (for certain service providers with appropriate safeguards)

We ensure that any international transfers comply with UK GDPR requirements through:

• Adequacy decisions by the UK government
• Standard contractual clauses
• Other approved transfer mechanisms

11. Changes to This Privacy Policy

We may update this privacy policy from time to time. We will notify you of significant changes by:

• Posting a notice on our website
• Updating the "Last updated" date at the top of this policy
• Sending an email notification (for material changes)

Your continued use of our website after changes indicates acceptance of the updated policy.

12. Contact Us

If you have questions or concerns about this privacy policy or our data practices, please contact us: