m-powered People and Communities CIC (“m-powered”, “we”, “us”, “our”) is committed to protecting your privacy. This Privacy Policy explains what personal data we collect through our website, how we use it, and your rights under UK data protection law (the UK GDPR and the Data Protection Act 2018).

m-powered People and Communities CIC is a Community Interest Company registered in England and Wales. We are the data controller responsible for your personal data.

Company registration number: 17108123
Data protection contact: contact@m-powered.org.uk

Information you give us directly
When you complete a contact or enquiry form on our website, or when you email us directly, we collect the details you provide. This may include your name, email address, phone number, and the content of your message.

Information collected automatically
When you visit our website, we use Google Analytics to collect anonymous or pseudonymous information about how visitors use the site, such as pages viewed, approximate location, device and browser type, and referral source.

We use your personal data only for m-powered’s own purposes, including to:

• respond to your enquiries, whether made through our website contact forms or by email, and provide the information or support you have requested;
• maintain and improve our website and understand how it is used;
• keep records of communications with you;
• comply with our legal and regulatory obligations.

We will not use your data for any purpose unrelated to m-powered’s work.

We rely on the following lawful bases under UK GDPR:

• Consent – for the use of non-essential cookies (analytics).
• Legitimate interests – to respond to enquiries and to operate and improve our website, where this does not override your rights and freedoms.
• Legal obligation – where we are required to retain or process data by law.

We do not sell your personal data, and we do not share your personal data with any other organisation for that organisation’s own purposes. Your data is used for m-powered’s purposes only.

To run our website, we use the following service providers who process limited data strictly on our behalf and under our instructions (these are “data processors”, not third parties who use your data for themselves):

• Our website hosting provider, which stores the website and any data submitted through it.
• Google Analytics, which provides website usage statistics.

These providers are contractually required to keep your data secure and to use it only to provide their service to us.

We may also disclose data where required by law, by a regulator, or to protect our legal rights.

We keep personal data only for as long as necessary for the purposes set out in this policy, after which it is securely deleted. Enquiry records are typically retained for 48 months unless we have an ongoing relationship with you or a legal reason to keep them longer.

Our website uses cookies, including analytics cookies set by Google Analytics. Essential cookies are needed for the site to function. Non-essential (analytics) cookies are only set with your consent, which you can give or withdraw at any time through our cookie banner or your browser settings.

Under UK data protection law you have the right to:

• access the personal data we hold about you;
• request correction of inaccurate or incomplete data;
• request erasure of your data;
• restrict or object to our processing of your data;
• request portability of your data;
• withdraw consent at any time (where we rely on consent).

To exercise any of these rights, contact us at contact@m-powered.org.uk. We will respond within one month.

If you have concerns about how we handle your data, please contact us first at contact@m-powered.org.uk. You also have the right to complain to the Information Commissioner’s Office (ICO):

• Website: ico.org.uk
• Helpline: 0303 123 1113

We may update this policy from time to time. The latest version will always be available on our website, with the “Last updated” date shown at the top.

For any questions about this Privacy Policy or your personal data, contact us at:

contact@m-powered.org.uk