Privacy Policy

By completing our forms or using our services, you accept and consent to your data being handled in the manner set out in this policy.

We are committed to protecting and respecting your privacy. This policy sets out the basis on which any personal data we collect from you or that you provide to us will be stored, used and processed. Personal information is any information that identifies you or would enable someone to contact you, such as your name, email address, phone number and other non-public information associated with such data.

Please read this Policy carefully, as it sets out the basis on which any personal data we collect from you or that you provide to us (“data”) will be processed by us, in compliance with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018 and the Data (Use and Access) Act 2025 (DUAA).

What data might be collected?

When you participate in, access or sign up to any of our services (including our newsletters, events, competitions, social media and message boards), create an account using our online services, apply to or participate in DLN programmes or otherwise correspond with us, we will receive data about you.

This data may consist of information such as your name, email address, landline or mobile number. Depending on the activity, we may also obtain information about the name and type of your business and its address.

We also use cookies and collect IP addresses from visitors to our websites.

We may process your special category data such as ethnic origin, age, gender and socio-economic history to measure the impact of our programmes.

Children's Data

As an organisation working to unlock the potential of young people aged 7-19, we take the protection of children's data seriously. When providing online services likely to be accessed by children, we adhere to the Age Appropriate Design Code and ensure our data processing practices take their specific needs and vulnerabilities into account

How will we use the data and what is our lawful basis?

We process personal information for certain legitimate business purposes. Under the UK GDPR, we must have a valid lawful basis for each processing activity. Our purposes and their corresponding lawful bases include:

Purpose of Processing

To provide you with our services, activities or online content and to arrange and facilitate your participation in our programmes/projects.

To meet our obligations to you and deal with your requests and enquiries.

To process special category data (e.g., ethnic origin, socio-economic history) to measure the impact of our programmes.

To identify and prevent fraud and enhance the security of our network and information systems.

To better understand how people interact with our website and determine the effectiveness of our promotional campaigns.

To provide e-communications and promotional materials which we think will be of interest to you.

To safeguard vulnerable individuals participating in our programmes.

Lawful Basis for Processing

Contract (processing is necessary for a contract we have with you or to take steps before entering into a contract).

Contract or Legitimate Interests (to provide effective customer service).

Explicit Consent (or another specific condition under Article 9 of the UK GDPR).

Legitimate Interests (protecting our business and users) or Legal Obligation.

Legitimate Interests (improving our services).

Consent (for new subscribers) or Legitimate Interests (soft opt-in for existing supporters, where applicable).

Recognised Legitimate Interests (as defined under the DUAA) or Vital Interests.

Whenever we process data based on legitimate interests, we ensure that we always take account of your individual rights. You have the right to object to this processing at any time.

Data Sharing and Third Parties

We will not sell your personal data to third parties. However, we may share your information with trusted third parties in the following circumstances:

Service Providers: We may share data with third-party service providers who perform functions on our behalf, such as IT support, website hosting and email distribution. These providers are bound by strict confidentiality agreements.
Partners and Schools: To facilitate our programmes, we may share relevant information with partner employers and schools involved in your specific activities.
Legal Requirements: We may disclose your data if required to do so by law or in response to a valid request from law enforcement or government authorities.

How long will the data be stored?

We will only retain your personal data for as long as necessary to fulfil the purposes we collected it for, including for the purposes of satisfying any legal, accounting or reporting requirements.

Programme Participation Data: Retained for the duration of your involvement in the programme and for a set period thereafter to measure long-term impact, subject to your consent.
Marketing Data: Retained until you withdraw your consent or opt out of receiving communications.
Enquiries: Retained for as long as necessary to resolve your query and for a short period afterwards for reference.

How will the data be stored securely?

All personal data you provide to us is stored securely in accordance with the relevant supervisory authority’s guidelines on the storage of personal data. We cannot guarantee the security of your data during transmission from you to us, and you transmit such data at your own risk. Once your data has reached our systems, we will use strict procedures and security features to try and prevent unauthorised access.

What are cookies and how do we use them?

Cookies are text files placed on your computer to collect standard Internet log information and visitor behaviour information. When you visit our websites, we may collect information from you automatically through cookies or similar technology.

Our Company uses cookies in a range of ways to improve your experience on our website, including:

Keeping you signed in.
Understanding how you use our website

Under the DUAA, we do not require your consent for statistical cookies (which solely collect information for statistical purposes about the use of the service) or appearance cookies (which adapt the appearance of the service to your preferences). However, you have the right to opt out of these cookies simply and free of charge. You can manage your cookie preferences through the settings panel on our website. For further information on cookies, visit allaboutcookies.org.

What are your data protection rights?

Your principal rights under data protection law are:

The right to access: You can ask for copies of your personal data. We will ask to verify your identity before releasing any personal data we hold about you.
The right to rectification: You can ask us to rectify inaccurate personal data and to complete incomplete personal data.
The right to erasure: You can ask us to erase your personal data.
The right to restrict processing: You can ask us to restrict the processing of your personal data.
The right to object to processing: You can object to the processing of your personal data in certain circumstances (e.g., direct marketing or legitimate interests).
The right to data portability: You can ask that we transfer your personal data to another organisation or to you.
The right to withdraw consent: Where the legal basis of our processing is consent, you can withdraw that consent at any time.

Data Protection Complaints Procedure

If you have any concerns or complaints about how we use your personal data, we want to hear from you so we can put it right. In accordance with the DUAA, we have a formal complaints procedure in place.

How to complain to us:

You can submit a data protection complaint electronically by emailing our Data Protection Officer at [email protected] or by writing to us at our registered address (Pound House, 62A Highgate High Street, London, N6 5HX).

What happens next:

1.We will acknowledge your complaint within 30 days of receipt.

2.We will make reasonable enquiries and take appropriate steps to resolve your complaint without undue delay.

3.We will keep you informed of our progress and provide a final outcome in plain language.

Escalation: If you remain dissatisfied with how we have handled your complaint, you have the right to lodge a complaint with the Information Commissioner's Office (ICO).

ICO Website: https://ico.org.uk/make-a-complaint/

ICO Helpline: 0303 123 1113

Changes to our Privacy Policy

Any changes we may make to this policy will be posted on this page and, where appropriate, notified to you by email.

Data Protection Officer

Any questions or requests regarding this policy and/or the processing of your data are welcomed and should be addressed to [email protected].

Corporate Memberships

Interested in our corporate membership?

Is your workplace full of people passionate about social and talent mobility? Why not bring them closer to real diverse talent by giving them access to our network. Sign up your team for a corporate membership. Getting started is easy: just create a free account and click the link below to purchase memberships for your team!