Privacy Policy

Cat & Crow Community Interest Company C.I.C. is committed to protecting your personal data and respecting your privacy.

This policy explains how we collect, use, and store personal information.

Who We Are

Cat & Crow Community Interest Company C.I.C.
Company Limited by Guarantee
Registered in England and Wales
Company Number: 17009004
Registered Office: 17 Stanley Road, Garndiffaith, Pontypool. NP4 7LY

Email: privacy@catandcrow.co.uk

For the purposes of data protection law, Cat & Crow Community Interest Company C.I.C. is the data controller.

What Information We Collect

We may collect and process the following personal data:

• Name
• Email address
• Telephone number (if provided)
• Information provided in enquiry emails
• Booking information relating to session attendance

We do not collect unnecessary personal data.

We do not request or store detailed clinical information as part of our community-based activity.

How We Use Your Information

We use personal data to:

• Respond to enquiries
• Provide information about sessions
• Manage bookings
• Communicate practical details about activities
• Maintain basic administrative records

We do not sell personal data.
We do not use personal data for unrelated marketing purposes.

Lawful Basis for Processing

Under the UK General Data Protection Regulation (UK GDPR), we rely on the following lawful bases:

• Legitimate interests – for responding to enquiries and managing participation
• Contract – where you register for a session
• Legal obligation – where required for regulatory or financial compliance

Where consent is required, it will be requested clearly.

How We Store Your Data

Personal data is stored securely using password-protected systems and secure email accounts.

We take reasonable steps to protect data from loss, misuse, or unauthorised access.

Personal data is retained only for as long as necessary for administrative or legal purposes.

Sharing Information

We do not share personal data with third parties except:

• Where required by law
• Where necessary for safeguarding reasons
• Where required for basic administrative services (such as secure email or hosting providers)

We do not transfer personal data outside the UK unless appropriate safeguards are in place.

Your Rights

Under UK data protection law, you have the right to:

• Request access to your personal data
• Request correction of inaccurate data
• Request erasure of data (where appropriate)
• Object to processing in certain circumstances
• Request restriction of processing

To exercise these rights, please contact us using the details above.

If you are dissatisfied with how we handle your data, you have the right to complain to the Information Commissioner’s Office (ICO):

www.ico.org.uk

Cookies

Our website may use basic cookies necessary for site functionality.

We do not use invasive tracking or profiling cookies.

If additional cookies are used, they will be disclosed clearly.

Updates to This Policy

We may update this policy from time to time to reflect changes in our activities or legal requirements.

The most current version will always be available on this page.