1. Introduction & Scope
Street First Aid (“we,” “us,” “our”) respects your privacy. This Privacy Policy explains how we collect, use, disclose, and protect your personal data when you use streetfirstaid.org.uk (the “Website”) or otherwise interact with us. This Policy applies only to our operations and does not cover third-party websites even if they are linked from ours.

We are a data controller for the personal data we collect via the Website.

2. Personal Data We Collect
We may collect:

  • Contact information, such as name, email address, phone number (e.g. when you fill in a contact form or subscribe to newsletters).

  • Technical & usage data, such as IP address, browser type/version, device information, operating system, pages visited, referral URLs, session durations, etc.

  • Communications, e.g. your messages to us, correspondence, support requests.

  • Cookies and similar tracking technologies (see our Cookies Policy) to collect data about your browsing behaviour.

3. How We Use Your Data / Purposes & Legal Basis
We use your personal data for purposes including:

  • To provide, maintain, and improve our Website and services.

  • To respond to your inquiries or communications.

  • To send you newsletters, updates, marketing (if you opted in).

  • To manage user accounts (if applicable).

  • To monitor & analyze usage and trends, for analytics and research.

  • To comply with legal obligations.

We rely on one or more legal bases for processing:

  • Consent (where you have agreed, e.g. for marketing).

  • Contractual necessity (e.g. to respond to a service or inquiry).

  • Legitimate interests (where our interests are not overridden by your rights).

  • Legal obligations (when required by law).

4. Sharing & Disclosure of Personal Data
We may share your personal data with:

  • Service providers & processors, e.g. hosting providers, email / marketing platforms, analytics providers.

  • Legal & regulatory authorities, when required by law, or to protect our rights.

  • Business transfers, e.g. in connection with a merger or sale of part/all of our business (your data may be transferred with the business).

We require third parties to comply with data protection laws and only process data for the purposes we specify.

5. International Transfers
If personal data is transferred outside the UK / EEA, we will ensure appropriate safeguards (e.g. standard contractual clauses or to jurisdictions with adequacy decisions) to protect your rights.

6. Data Retention
We retain personal data only for as long as necessary, to fulfill the purposes for which it was collected, to comply with legal obligations, resolve disputes, or enforce our agreements. After that period, we delete or anonymise your data.

7. Security Measures
We implement technical and organisational measures to protect personal data against unauthorised or unlawful processing, accidental loss, destruction or damage. Measures may include encryption, access controls, secure servers, regular security reviews.

8. Your Rights
Depending on your jurisdiction, you may have rights including:

  • The right to access the personal data we hold about you.

  • The right to rectify inaccurate or incomplete data.

  • The right to erase / delete your data (“right to be forgotten”) in certain circumstances.

  • The right to restrict processing of your personal data.

  • The right to object to processing (e.g. for marketing).

  • The right to data portability, to receive your data in a structured, commonly used format.

  • The right to withdraw consent (where processing is based on consent).

  • The right to lodge a complaint with a supervisory authority (in the UK, the ICO).

To exercise any of these rights, contact us at the details below. We will respond within statutory timelines (typically one month, which can be extended in complex cases).

9. Children / Minors
Our Website is not directed at children under 16. We do not knowingly collect personal data from minors without parental consent. If you believe we have collected data of a minor, contact us and we will delete it.

10. Cookies & Tracking
We use cookies, web beacons, and similar technologies to collect usage data. For full details, see our Cookies Policy/Notice (below or separately linked).

11. Changes to the Privacy Policy
We may update this Privacy Policy from time to time. Changes become effective when posted on the Website (with a revised “Last updated” date). Continued use after modifications means acceptance of the new Policy.