A colorful illustration of a hillside village centered on a brick building, with surrounding houses, green fields, and people working at a large excavation site along a cliff.

Privacy Policy

Early intervention projects that help young people build emotional resilience, strengthen relationships and stay connected to learning.

Privacy policy for service users

Read up on information about our cookie and privacy policy.

If you are a volunteer, please see our specific privacy policy for volunteers.

1. INTRODUCTION

One-Eighty is committed to protecting your privacy and security. This policy explains how and why we use your personal data, to ensure you remain informed and in control of your information.

We will never sell your personal data, and will only ever share it with organisations we work with where necessary in accordance with our service provision requirements or the law.

Questions?

Any questions you have in relation to this policy or how we use your personal data should be sent to
enquiries@one-eighty.org.uk marked for the attention of the Chief Executive Officer or sent by post to the Chief Executive Officer, One-Eighty Ltd, Unit 20 Kings Meadow, Ferry Hinksey Road, Oxford OX2 0DP.

2. ABOUT US

Your personal data (i.e. any information which identifies you, or which can be identified as relating to you personally) will be collected and used by One-Eighty Ltd (charity no. 1147546 in England). One-Eighty Ltd is the data controller.

3. WHAT INFORMATION WE COLLECT

Personal data you provide

We collect data you provide to us. This includes information you give as a service user, or a family member of a service user. For example:

personal details (name, date of birth, email, address, telephone etc.)
mental health and behaviour history (through sharing by professional organisations such as CAMHS, Virtual Schools, schools, academies, etc.)

Information created by your involvement with One-Eighty

Your activities and involvement with One-Eighty will result in personal data being created. This may include, for a service user, detailed notes of information recorded during intervention sessions, during assessments by staff, or from professionals at schools, CAMHS, etc.

Information we generate

We may conduct research and analysis on the information we hold about our service users for the purposes of, by aggregation only, disseminating information in the public realm or to support applications for donations and services contracts.

Information from third parties

We frequently receive personal data about service users from third party organisations such as CAMHS, Virtual Schools, etc.

We may also collect information from social media where you have given us permission to do so, or if you post on one of our social media pages.

Sensitive personal data

All the personal data we collect from our service users is treated as sensitive. All data is secured in Microsoft Data Centres or, for manual documents, is kept in secure areas.

Accidents or incidents

If an accident or incident occurs on our property, at one of our events or involving one of our staff (including volunteers) then we’ll keep a record of this (which may include personal data and sensitive personal data).

4. HOW WE USE INFORMATION

We only ever use your personal data with your consent, or where it is necessary in order to:

enter into, or perform, a contract with you;
comply with a legal duty;
protect your vital interests.

In any event, we’ll only use your information for the purpose or purposes it was collected for (or else for closely related purposes):

Marketing

We use personal data, in aggregate, to communicate with people, to promote One-Eighty and to help with fundraising. We will not reveal your personal information to any third party without your express prior consent.

Administration

We use personal data for administrative purposes (i.e. to carry on our charity work). This includes maintaining databases of our service users and their families, and performing our obligations under contracts or in accordance with the law.

5. DISCLOSING AND SHARING DATA

We will never sell your personal data. We may share personal data with professionals such as CAMHS, schools, Virtual Schools, etc. who are involved in supporting you with your mental health outcomes. These activities are only undertaken with professionals in organisations that we know will keep your information confidential and secure.

Occasionally, where we partner with other organisations, we may also share information with them (for example, if you register to attend an event being jointly organised by us and another charity). We will only share information when necessary and we will ensure we notify you first.

6. MARKETING

We publish an annual report and other printed media, as well as information on our website in support of our mission, events and activities. On occasion we may use personal data concerning our service users and photos to illustrate our mission and activities. However, we will not use your personal data for marketing purposes without prior consent.

Anonymised data

We may aggregate and anonymise personal data so that it can no longer be linked to any particular person. This information can be used for a variety of purposes, such as disseminating information in the public realm or to support applications for donations and services contracts.

9. HOW WE PROTECT DATA

We employ a variety of physical and technical measures to keep your data safe and to prevent unauthorised access to, use of, or disclosure of your personal information.

Electronic data and databases are stored on secure computer systems and we control who has access to information (using both physical and electronic means).

10. STORAGE

Where we store information

One-Eighty’s operations are based in the UK and we store our data within the European Union. Some organisations which provide services to us may transfer personal data outside of the EEA, but we will only allow them to do so if your data is adequately protected.

For example, some of our systems use Microsoft products. As a US company, it may be that using their products result in personal data being transferred to or accessible from the US. However, we will allow this as we are certain personal data will still be adequately protected (as Microsoft is certified under the USA’s Privacy Shield scheme).

How long we store information

We will only use and store information for so long as it is required for the purposes it was collected for. How long information will be stored for depends on the information in question and what it is being used for, and we delete what is no longer required.

11. KEEPING YOU IN CONTROL

We want to ensure you remain in control of your personal data. Part of this is making sure you understand your legal rights, which are as follows:

the right to confirmation as to whether or not we have your personal data and, if we do, to obtain a copy of the personal information we hold (this is known as a subject access request);
the right to have your data erased (though this will not apply where it is necessary for us to continue to use the data for a lawful reason);
the right to have inaccurate data rectified;
the right to object to your data being used for marketing or profiling; and
where technically feasible, you have the right to personal data you have provided to us which we process automatically on the basis of your consent or the performance of a contract. This information will be provided in a common electronic format.

Please keep in mind that there are exceptions to the rights above and, though we will always try to respond to your satisfaction, there may be situations where we are unable to do so.

If you would like further information on your rights or wish to exercise them, please write to our Chief Executive Officer at One-Eighty, Unit 20 Kings Meadow, Ferry Hinksey Road, Oxford OX2 0DP or email
admin@one-eighty.org.uk.

Complaints

You can complain to One-Eighty directly by contacting our Chief Executive Officer using the details set out above. If you wish to make a complaint which does not directly relate to your data protection and privacy rights, you can do so in accordance with our charity’s complaints policy.

If you are not happy with our response, or you believe that your data protection or privacy rights have been infringed, you can complain to the UK Information Commissioner’s Office which regulates and enforces data protection law in the UK. Details of how to do this can be found at www.ico.org.uk.

This Privacy Policy will be amended from time to time to ensure it remains up-to-date and accurately reflects how and why we use your personal data. The current version of our Privacy Policy will always be posted on our website.

This Privacy Policy was last updated on 30 November 2023.