Drawing and Talking Intervention

Privacy Policy

Effective Date: 6.2.26
Last Updated: 6.2.26

Who We Are

Teulu Wellbeing and Child Therapy CIC is a Community Interest Company registered in England and Wales. We are committed to protecting your personal data and handling it responsibly.

For the purposes of UK data protection law, we are the Data Controller.

Contact details: 

Teulu Wellbeing and Child Therapy CIC
Email: Teuluwellbeing@gmail.com

If you have any questions about this policy or how we use your data, please contact us.

Our Commitment to Data Protection

We process personal data in accordance with:

• UK General Data Protection Regulation (UK GDPR)
• Data Protection Act 2018
• Guidance issued by the Information Commissioner’s Office (ICO)

We are committed to processing personal data lawfully, fairly, transparently, and securely.

What Information We Collect

Information Provided by Parents/Guardians

We collect information through secure Google Forms for purposes such as registration, safeguarding, event participation, communication, and administration.

This may include:

• Parent/guardian name and contact details
• Child’s name and date of birth
• Emergency contact information
• Relevant medical or additional needs information
• Consent information
• Any other information necessary for safe participation in our activities

We only collect information that is necessary, relevant, and proportionate to our activities.

Website Usage Information

When you visit our website, we may automatically collect limited technical data such as:

• IP address
• Browser type
• Pages visited
• Date and time of access

This information helps us maintain website security and improve functionality.

How We Use Personal Data

We use personal data to:

• Deliver our charitable and community activities
• Communicate with parents and guardians
• Maintain accurate records
• Ensure the safety and wellbeing of children and participants
• Meet safeguarding responsibilities
• Comply with legal and regulatory obligations

We do not sell personal data to third parties.

Safeguarding and Duty of Care

As a CIC working with children and families, safeguarding is central to our work.

Personal data may be processed where necessary to:

• Protect the vital interests of a child or vulnerable individual
• Comply with safeguarding legislation
• Share information with appropriate authorities where there is a legal duty or safeguarding concern

Where safeguarding concerns arise, information may be shared with relevant agencies (e.g., local authority, police, safeguarding partners) in accordance with UK law.

Lawful Bases for Processing

Under UK GDPR, we rely on one or more of the following lawful bases:

• Consent – where you have given clear permission
• Legal obligation – where processing is required by law
• Legitimate interests – where necessary for running our organisation safely and effectively
• Vital interests – where necessary to protect someone’s life or safety

Where we rely on consent, you may withdraw it at any time.

Where we process special category data (such as health information), we do so in accordance with Article 9 UK GDPR, including safeguarding and substantial public interest grounds where applicable.

Data Storage and Security

Information collected via Google Forms is stored within Google’s secure systems. Google acts as our data processor.

We implement appropriate technical and organisational measures to protect data against:

• Unauthorised access
• Loss or misuse
• Alteration or disclosure

Access to personal data is limited to authorised personnel only.

We retain personal data only for as long as necessary in line with our Data Protection Policy and legal obligations.

International Data Transfers

Google may process data outside the UK. Where this occurs, appropriate safeguards are in place in accordance with UK GDPR requirements.

Your Rights

Under UK data protection law, you have the right to:

• Access your personal data
• Request correction of inaccurate data
• Request erasure (where applicable)
• Restrict or object to processing
• Request data portability
• Withdraw consent (where consent is relied upon)

To exercise your rights, please contact us at Teuluwellbeing@gmail.com.

If you are unhappy with how we handle your data, you have the right to complain to the Information Commissioner’s Office (ICO):

Information Commissioner’s Office
www.ico.org.uk
Helpline: 0303 123 1113

Children’s Data

We collect children’s personal data only where necessary for participation in our activities and with parental/guardian knowledge. We handle children’s data with enhanced care and confidentiality.

Updates to This Policy

We may update this Privacy Policy from time to time. The latest version will always be available on our website.