Privacy Policy

Empower and Elevate Privacy Policy

Empower and Elevate (“we,” “our,” or “us”) is committed to protecting the privacy and security of personal information. This Privacy Policy outlines how we collect, use, store, and share personal data in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.


Scope of This Policy

This policy applies to all individuals whose personal data we process, including employees, subcontractors, clients, children and parents/guardians participating in our programs, and website visitors.


What Personal Data We Collect

We may collect and process the following personal data:

  • Staff & Subcontractors: Name, contact details, DBS check results, qualifications, bank details (for payments), emergency contact details, tax information (for self-employment records).
  • Children & Parents/Guardians: Child’s name, date of birth, emergency contact details, medical conditions/allergies, attendance records, safeguarding reports.
  • Website Visitors: IP addresses, cookies, browsing behaviour (if applicable).


How We Collect Personal Data

We collect personal data in the following ways:

  • Directly from individuals (e.g., registration forms, job applications, self-employment agreements).
  • Through our website (e.g., contact forms, cookies, analytics tools).
  • From third parties (e.g., DBS checks, referees, safeguarding agencies).


Why We Process Personal Data

We process personal data for the following purposes:

  • Staff Management: Employment records, payroll, compliance with legal requirements.
  • Safeguarding & Child Protection: Ensuring the safety and well-being of children, reporting concerns as required by law.
  • Program Operations: Managing bookings, attendance, and child safety during activities.
  • Legal & Regulatory Compliance: Meeting our obligations under employment law, tax law, and safeguarding regulations.
  • Marketing & Communications: Providing updates and relevant information about our services (with consent).


Legal Basis for Processing Personal Data

We process personal data under the following legal bases:

  • Contractual Obligation: Processing necessary for employment, subcontractor agreements, and service delivery.
  • Legal Compliance: Processing required by law (e.g., DBS checks, safeguarding records, tax reporting).
  • Legitimate Interests: Processing necessary for business operations (e.g., staff management, program delivery).
  • Consent: Where required, we obtain explicit consent for marketing communications and non-essential data processing.


How We Store & Protect Personal Data

  • Personal data is stored securely in password-protected digital systems or locked physical files.
  • Access is limited to authorised personnel on a need-to-know basis.
  • We implement technical and organisational measures to protect against unauthorised access, loss, or misuse.


Data Sharing & Third Parties

We only share personal data when necessary and in compliance with the law. This includes:

  • Safeguarding Authorities: When required to protect a child’s welfare.
  • DBS & Regulatory Bodies: To verify suitability for working with children.
  • HMRC & Payroll Services: For payment and tax compliance purposes.
  • IT & Cloud Service Providers: To manage secure data storage and communications.

We do not sell or trade personal data with third parties.


Data Retention Policy

We retain personal data only for as long as necessary:

  • Staff & Subcontractor Records: Up to 6 years after the end of the contract (for legal and tax purposes).
  • Safeguarding & Child Records: Retained in accordance with safeguarding laws and best practices.
  • Marketing Data: Retained until consent is withdrawn.

After retention periods expire, data is securely deleted or anonymised.


Individual Rights

Under UK GDPR, individuals have the right to:

  • Access their personal data.
  • Request correction of inaccurate or incomplete data.
  • Request deletion of personal data (where legally applicable).
  • Restrict or object to data processing.
  • Withdraw consent for marketing communications.
  • Lodge a complaint with the Information Commissioner’s Office (ICO) if they believe their data has been mishandled.

To exercise these rights, contact us at info@empowerandelevate.co.uk


Updates to This Policy

We may update this Privacy Policy from time to time. The latest version will always be available on our website. If significant changes are made, we will notify affected individuals.


Contact Information

For questions regarding this Privacy Policy or to exercise your data protection rights, contact: info@empowerandelevate.co.uk