This page is a starting template with sample wording, added so the site has something in place. Because you work with young people and handle referral and safeguarding information, please have this properly reviewed (ideally by someone with UK GDPR / data protection expertise) before treating it as your real policy – the bracketed items need your actual details filled in.
Fromehall Mill Studios ("we", "us") is committed to protecting the privacy of everyone who uses this website or engages with our provision, including young people, parents/carers, referrers and partner organisations.
Fromehall Mill Studios, based at Fromehall Mill, Stroud, Gloucestershire, operates in partnership with Creative Sustainability CIC. [Add your registered company/charity number and data controller details here.]
Depending on how you interact with us, we may collect:
We use personal information to:
Under UK GDPR, we rely on one or more of the following: your consent, our legitimate interests in running a referral-based provision, performance of a contract, a legal obligation, or the protection of vital interests / safeguarding duties where relevant. [Confirm and set out the specific basis for each type of data you hold.]
We may share relevant information with Creative Sustainability CIC as our operating partner, the referring school or local authority, and other professionals directly involved in a young person's care or education. We do not sell personal information to third parties.
[Set out your actual retention periods here – e.g. referral and education records retained for X years in line with safeguarding/education record-keeping guidance, enquiry form data deleted after X months if no referral proceeds.]
[Describe any cookies or analytics tools actually in use on the site, e.g. "this website does not currently use tracking cookies" or list the specific cookies/analytics service if one is added later.]
Under UK GDPR you have the right to ask us for access to, correction of, or deletion of your personal information, to restrict or object to certain processing, and to request that information be provided in a portable format. To exercise any of these rights, contact us using the details below.
You also have the right to complain to the Information Commissioner's Office (ICO) at ico.org.uk if you believe we have not handled your information properly.
We may update this policy from time to time. This version was last updated on [date].