Privacy Notice
BE(YOU)FULL CIC Empowering Young People Through Creativity, Mentoring & Social Impact
Last updated: 29 November 2025
1. Introduction
BE(YOU)FULL CIC (“we”, “us”, “our”) is committed to protecting your privacy and
Handle your personal information with transparency, respect, and care.
This Privacy Notice explains:
- What personal data we collect
- Why we collect it
- How we use, store, and protect it
- Your rights under the UK GDPR
- How to contact us about your data
We are a UK-registered Community Interest Company focused on education, mentoring,
personal development, and community impact.
Registered company number: 15769253
Registered in: England & Wales
2. The Data We Collect
We may collect and process the following categories of personal data:
2.1 Information you provide directly
- Name
- Email address
- Phone number
- Postal address (where needed for events or services)
- Payment information (via secure third-party payment processors)
- Applications for mentoring, coaching, or community programs
- Survey responses, feedback, or testimonials
2.2 Automatically collected data
When you visit our website, we may automatically collect:
- IP address
- Browser type and version
- Device information
- Pages visited and time spent on the site
- Referring to websites or links
We use this information to understand how people use our website and to improve
performance, accessibility, and content.
2.3 Special category data
We do not intentionally collect special category data (such as health data,
ethnicity, religious beliefs, or political opinions).
If a mentoring applicant voluntarily shares sensitive information, it will be kept
strictly confidential and used only where necessary to support their participation
in our programmes.
3. How We Use Your Information
We process personal data for the following purposes:
3.1 To provide our services
- Delivering mentoring, coaching, and educational activities
- Managing programme and event participation
- Responding to enquiries and support requests
- Processing registrations and, where relevant, payments
3.2 Communication with you
- Sending newsletters and updates you have subscribed to
- Sharing resources, opportunities, and programme information
- Requesting feedback to improve our impact
3.3 Compliance and governance
- Meeting legal and regulatory obligations
- Safeguarding young people and vulnerable participants
- Fulfilling CIC and charity-style reporting duties
3.4 Improvement and insight
- Analysing website traffic and engagement
- Improving our services, programs, and digital experience
We will never sell your personal data.
We also do not share your data for third-party advertising.
4. Legal Basis for Processing
Under the UK GDPR, we must have a lawful basis to process your personal data.
Depending on the context, we rely on:
- Consent – for example, when you subscribe to our newsletter or choose to receive updates.
- Contractual necessity – where we need your data to provide mentoring, coaching, or programme participation.
- Legitimate interests – such as improving our services, protecting our systems, and developing our work in ways that do not override your rights.
- Legal obligations – e.g., safeguarding, financial, or regulatory requirements.
Where we rely on consent, you can withdraw it at any time by contacting us
or by using the unsubscribe link in our emails.
6. Data Security
We take the security of your data seriously and use appropriate technical
and organisational measures to protect it, including:
- Password protection and access controls
- Limiting access to staff or partners who genuinely need it
- Use reputable, secure third-party services
- Regular reviews of data-handling practices
While we work hard to protect your data, no system can be guaranteed
100% secure. If we become aware of a data breach that risks your rights
and freedoms, we will notify you and, where required, the Information
Commissioner’s Office (ICO).
7. Data Retention
We will only keep your personal data for as long as is necessary for the purpose
it was collected, or to meet legal and regulatory requirements. Typical
Retention periods include:
- Newsletter subscription data – kept until you unsubscribe.
- Mentoring and programme records – up to 6 years (to comply with legal and safeguarding obligations).
- Financial and payment records – 6 years (HMRC requirement).
- Website analytics – usually up to 26 months.
After the relevant period, data is securely deleted or anonymised.
8. Your Rights Under the UK GDPR
You have a number of important rights in relation to your personal data. These include the right to:
- Access a copy of the personal data we hold about you;
- Correct inaccurate or incomplete information;
- Request deletion of your data in certain circumstances (“right to be forgotten”);
- Restrict or object to certain types of processing;
- Withdraw consent where we rely on it;
- Receive your data in a portable format, where technically feasible;
- Complain to the UK Information Commissioner’s Office (ICO) if you are unhappy with how we handle your data.
If you would like to exercise any of these rights, please contact us using the details below.
Further information about your rights is available from the ICO:
https://ico.org.uk/.
9. International Transfers
Some of our trusted service providers may be located outside the UK.
Where this is the case, we will ensure appropriate safeguards are in place.
such as adequacy decisions or Standard Contractual Clauses, so that your
Data remains protected to UK GDPR standards.
10. Children and Young People
We work with young people, educators, and community partners as part of our
programmes. We do not knowingly collect personal information from anyone
under 13 without appropriate parental or guardian consent.
Where we engage directly with young people, we apply clear safeguarding
procedures and only collect the minimum data needed to support their
Participate safely and responsibly.
12. Changes to This Privacy Notice
We may update this Privacy Notice from time to time, for example, to reflect
changes in law, regulation, or our services. The “last updated” date at the top
of this page will always show the most recent version.
13. Contact Us
If you have any questions about this Privacy Notice, how we use your data,
Or if you would like to exercise your rights, please contact:
BE(YOU)FULL CIC
Email:
contact@beyoufull.org
Website:
https://beyoufull.org
Registered Company No.: 15769253 (England & Wales)