Privacy Policy

Aspire NN Privacy Policy

Last updated: 25th September 2025

Aspire NN (“we”, “our”, “us”) respects your privacy and is committed to protecting your personal information. This Privacy Policy explains how we collect, use, store, and protect your data when you use our website and services.

Who we are

AspireNN is a voluntary, community and social enterprise (VCSE) organisation based in the UK. For the purposes of data protection law, we are the Data Controller of your personal data.

The Information We Collect

We may collect and process the following information about you:

Information you provide directly
- When you contact us (by email, phone, or contact form)
- When you sign up for our newsletters or events
- When you donate, volunteer, or join our programmes

Examples: your name, email address, postal address, phone number, and any details you share with us.

Information we collect automatically
- Technical data such as IP address, browser type, and pages visited (via cookies and analytics – see our Cookies Policy).
Sensitive information (special category data)
- If we collect sensitive data (e.g., health information for programme participation), we will only do so with your explicit consent and where necessary to provide support or meet legal obligations.

How we use your information

We will only use your personal data when the law allows us to. Common uses include:

To respond to your enquiries and provide our services
To manage event bookings, volunteering, and donations
To send you updates, newsletters, and information you’ve requested (with your consent)
To improve our website and services
To meet legal, safeguarding, or regulatory obligations

Legal bases we rely on

We process your personal data under the following legal bases:

Consent – where you have agreed (e.g., to receive our newsletter).
Contract – where processing is necessary to provide a service you’ve requested.
Legal obligation – where we must comply with the law.
Legitimate interests – where processing helps us run AspireNN effectively and does not override your rights.

How we store and protect your data

Your information is stored securely and only accessible to authorised staff and volunteers.
We use appropriate technical and organisational measures to protect against unauthorised access, loss, or misuse.
We keep your personal data only as long as necessary for the purposes set out in this policy, unless a longer retention period is required by law.

Sharing your information

We will never sell your data. We may share your information with:

Service providers who help us deliver our website and services (under strict agreements)
Partner organisations or funders, but only where necessary and with safeguards in place
Regulators or authorities if required by law

Your data rights

Under UK GDPR, you have rights over your personal data, including:

Access – to request a copy of the information we hold about you
Correction – to update or amend your data if it is inaccurate
Erasure – to ask us to delete your data (in certain circumstances)
Restriction – to limit how we process your data
Portability – to request transfer of your data to another provider
Objection – to processing based on legitimate interests or for marketing
Withdraw consent – where processing is based on your consent

To exercise these rights, please contact us using the details below.

If you are not satisfied with our response, you also have the right to complain to the Information Commissioner’s Office (ICO): www.ico.org.uk.

Third-party links

Our website may contain links to other sites. We are not responsible for the privacy practices of other organisations, so please check their policies before sharing personal information.