Legal
Privacy
policy
How we collect, use and protect your personal information when you use this website.
This page is a template prepared with the website build. It must be reviewed by Journey Together (and ideally a data protection adviser) before launch.
Last updated 18 October 2026
Who we are
This website is run by [Journey Together legal company name], a company registered in England and Wales (company number [number]), registered office [address]. We are the data controller for personal information collected through this website.
We are registered with the Information Commissioner’s Office (ICO), registration number [ICO number].
Information we collect
- Contact and referral forms: your name, email address, phone number (optional) and your message. For referrals, the name of the person needing support, your relationship to them, their main support needs and town or area.
- Job applications: your name, email address, phone number, the role you are applying for, your message, your CV and your confirmation of the right to work in the UK.
- We do not use analytics or advertising cookies, and we do not track you across other websites.
How we use your information
- To respond to your enquiry or referral and to discuss support (lawful basis: legitimate interests, and steps at your request before entering a contract).
- To consider your job application (lawful basis: steps at your request before entering a contract, and legitimate interests).
- Referrals may include information about a person’s health or support needs. We only ask for what we need, and we handle it as special category data under Article 9 of UK GDPR [confirm condition, e.g. health or social care].
How long we keep it
- Enquiries and referrals: [period, e.g. up to 2 years], or longer if you become someone we support.
- Job applications and CVs: deleted automatically after 6 months unless you are offered a role.
Who we share it with
We do not sell your information. Our trusted service providers store and process it on our behalf under contract: website hosting (Vercel), database hosting (MongoDB Atlas), file storage (Cloudinary) and email delivery [email provider]. Some providers may process data outside the UK under approved safeguards such as the UK International Data Transfer Agreement.
Your rights
You can ask to access, correct or delete your information, object to or restrict how we use it, or ask for a copy to be transferred. To make a request, contact us using the details on our Contact page.
If you are unhappy with how we have handled your information, you can complain to the Information Commissioner’s Office at ico.org.uk or on 0303 123 1113.
Questions? Contact us.
