ELEVATE COMMUNITY PRODUCTIONS CIC: PRIVACY NOTICE
Last updated: June 2026
1. WHO WE ARE (DATA CONTROLLER)
Elevate Community Productions CIC (ECP) is the data controller responsible for the personal data we collect from you. We are committed to treating your personal information with care and in full compliance with the UK General Data Protection Regulation (UK GDPR).
Contact for data protection matters:
Email: info@elevatecommunityproductions.org
Address: Cranford Community College, High Street, Hounslow, TW5 9PD
2. THE DATA WE COLLECT AND OUR LAWFUL BASIS
We collect and use personal data for specific, explicit and legitimate purposes, and we limit what we collect to only what is necessary (data minimisation).
A. Project Applications and Expressions of Interest
Data collected: Your name, contact details and availability. Where you choose to provide it, demographic information including ethnicity, disability and sexual orientation.
Purpose: To process your application or expression of interest, to communicate with you about scheduling and your involvement in our projects, and, in anonymised and aggregated form, to monitor the diversity of the people our projects reach and to report this to our funders.
Lawful basis: For your name, contact details and availability we rely on Legitimate Interests, as this is necessary to run our community projects. For demographic information, which is special category data under UK GDPR, we rely on your Explicit Consent. You give that consent by choosing to answer each demographic question. Every such question is optional and includes a "Prefer not to answer" option.
B. Mailing List Sign-Up
Data collected: Your name and email address.
Purpose: To send you updates, newsletters, project news and opportunities related to ECP's work.
Lawful basis: Consent. You opt in to receive these communications, and you can withdraw your consent at any time using the unsubscribe link in our emails.
C. Website Usage Data
Data collected: We may collect your IP address, browser type and information about the pages you visit.
Purpose: To analyse website traffic, troubleshoot technical issues and improve the experience on our site.
Lawful basis: Legitimate Interests, for monitoring and maintaining the performance and security of our website.
3. HOW WE STORE, PROTECT AND SHARE YOUR DATA
Security: We take appropriate steps to protect your personal data from unlawful processing, accidental loss or damage, using suitable technical and organisational measures. This includes password protection for files and keeping records in a secure location when not in use.
Sharing: We will not transfer or disclose your personal contact or application data to any third party without your authorisation, except where required by law (for example, a request from a government authority). Where our projects are grant funded, we may share anonymised, aggregated demographic and participation data with funders such as The National Lottery Heritage Fund or the London Borough of Hounslow for monitoring and reporting. This data does not identify you individually.
Service providers: We may use third-party service providers, such as email platforms, to deliver our services. They are required to process your data securely and lawfully on our behalf. Where a provider stores data outside the UK, we ensure appropriate safeguards are in place as required by UK GDPR, such as an adequacy decision or standard contractual clauses.
Retention: We only keep your personal data for as long as is necessary for the purpose for which it was collected.
4. CHILDREN'S AND YOUNG PEOPLE'S DATA
Some of our programmes involve young people. Where we collect personal data from anyone under the age of 18, we take extra care to ensure our communications and data handling are age appropriate. For participants under the age of 13, we will seek consent from a parent or guardian before collecting their data. If you are a parent or guardian and have any concerns about data we hold relating to a young person, please contact us using the details in Section 1.
5. YOUR RIGHTS AS A DATA SUBJECT
Under UK GDPR you have the following rights concerning the personal data we hold about you:
Right to be Informed: to know how we collect and use your personal data. This notice provides that information.
Right of Access: to request a copy of the personal data we hold about you (a Subject Access Request).
Right to Rectification: to have inaccurate or incomplete data corrected or updated without undue delay.
Right to Erasure: to ask us to delete your personal data in certain circumstances.
Right to Restrict Processing: to ask us to suppress or restrict the processing of your data in certain circumstances.
Right to Object: to object to our processing where we rely on Legitimate Interests as the lawful basis.
Right to Withdraw Consent: where we rely on consent, you can withdraw it at any time.
Right to Data Portability: where we process your data based on consent by automated means, you can ask to receive it in a structured, commonly used format, or to have it transferred to another organisation where technically feasible.
To exercise any of these rights, please contact us using the email provided in Section 1.
6. COMPLAINTS
If you are unhappy with how we have used your data, you have the right to complain at any time to the Information Commissioner's Office (ICO), the UK supervisory authority for data protection.
ICO website: https://ico.org.uk/make-a-complaint/