ClickSafe Club C.I.C.
Effective Date: January 2025
Review Date: January 2026

​

1. Introduction

​

ClickSafe Club C.I.C. is committed to protecting the privacy and personal data of all individuals we engage with, especially the children and families participating in our programmes. This policy outlines how we collect, use, store, and protect personal information in line with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

​

2. Who We Are

​

ClickSafe Club C.I.C. is a Community Interest Company registered in England. We deliver STEM education, digital skills, and online safety programmes to children and young people, with a focus on underserved communities.

​

For the purposes of data protection, ClickSafe Club C.I.C. is the Data Controller.

​

3. What Data We Collect

​

We may collect and process the following personal data:

• Children and young people: First name, age, school year, gender, interests, feedback, and photos/videos (with consent).

• Parents/carers: Contact details, consent forms, feedback, safeguarding disclosures (if applicable).

• Volunteers/staff: Contact details, DBS status, qualifications, safeguarding training.

• Community members (via surveys): Anonymous or semi-anonymous responses on local needs, interests, and programme feedback.

• ​

4. How We Collect Data

​

• Registration and consent forms (paper or digital)

• Pre- and post-programme surveys

• Email and text communication

• Programme evaluations

• Photo/video consent forms

• Event sign-in sheets

• Feedback forms from parents/carers

​

5. Why We Collect Data

​

We collect data in order to:

• Deliver safe and effective programmes

• Monitor attendance and engagement

• Measure impact and evaluate our services

• Report outcomes to funders and stakeholders

• Understand local needs and improve future delivery

• Safeguard the well-being of children and young people

• Ensure inclusive and equitable provision of services.

​

6. Lawful Basis for Processing

​

We process data under the following lawful bases:

• Consent: For media use, email updates, and optional surveys.

• Legitimate interest: To operate our programmes and evaluate effectiveness.

• Legal obligation: For safeguarding and health & safety compliance.

• Contract: When engaging freelancers, contractors, or facilitators.

​

7. How We Protect Data

​

• Data is stored on secure, password-protected devices or GDPR-compliant platforms (e.g. Google Workspace, Microsoft 365).

• Access to personal data is limited to staff and volunteers on a need-to-know basis.

• Paper records are stored in locked cabinets and shredded after digitisation (if applicable).

• Data is anonymised where possible for reporting and analysis.

​

8. Sharing Data

​

We will not sell or share your data with third parties for marketing purposes.

We may share data:

• With funders (anonymised or aggregated only)

• With safeguarding authorities if there is a concern

• With partners involved in delivering joint projects (with permission)

​

9. Retention

​

We retain data for the minimum time necessary:

• Programme data: up to 3 years (for reporting and learning)

• Safeguarding or serious incident records: up to 7 years

• Consent forms/media: until permission is withdrawn or the child turns 18.

​

10. Your Rights

​

You have the right to:

• Access your data

• Request correction or deletion

• Withdraw consent (where applicable)

• Object to processing

• Lodge a complaint with the Information Commissioner’s Office (ICO)

​

11. Contact Us

 

If you have any questions about this policy or your data, please contact:

Data Protection Lead
ClickSafe Club C.I.C.
Email: info@clicksafeclub.org.uk