Version 1.0 • Annual Review Cycle

Privacy & Data Protection

YouthSpark CIC is committed to protecting personal data and respecting the privacy of everyone we work with. We ensure all processing is in line with UK GDPR and the Data Protection Act 2018.

Personal Data We Collect

We collect only the information necessary to provide safe and effective programming. This includes:

Full Names
Contact Details
Parent/Carer Info
Learning Records
Safeguarding Info
Feedback

Lawful Basis for Processing

We process data based on the following legal grounds:

  • Consent: Clear and freely given permission.
  • Contractual: To fulfill our agreements with you.
  • Legal Obligation: To comply with UK laws.
  • Legitimate Interests: To improve our youth services safely.
  • Safeguarding: To protect the welfare of young people.

Your Individual Rights

Under UK GDPR, you have significant rights over your data:

  • Right to be informed about how data is used
  • Right to access your personal data (Subject Access Request)
  • Right to request corrections or deletions
  • Right to object to or restrict processing
  • Right to lodge a complaint with the ICO

Storage & Security

We take technical and organisational measures to keep your data safe:

Encryption
Access Control
Secure Backups