Youth Active Logo
Security & Compliance

Data Protection Policy

How Youth Active handles, protects, and respects your personal information in accordance with UK Law.

01. Our Policy

Youth Active is committed to protecting the personal data of every individual we work with—including young people, staff, volunteers, partners, and supporters. This policy explains how we collect, manage, use, and protect personal data in line with our legal responsibilities under:

The UK GDPR
Data Protection Act 2018

Our commitment is to handle personal data lawfully, fairly, and transparently, and to ensure the privacy and rights of individuals are always respected.

Why This Policy Exists

  • Ensure compliance with data protection law
  • Protect the rights of everyone whose data we hold
  • Explain how we collect, store, and use data
  • Reduce the risk of data breaches
  • Ensure transparency and accountability

Scope of This Policy

This policy applies to:

StaffVolunteersBoard of DirectorsContractorsSuppliers

Covers all personal data relating to identifiable individuals, regardless of format.

02. Data Processing Details

Information TypeHow We Use ItLegal Basis
Name, Address, DOB, HobbiesMember registration & programme safetyContract / Legitimate Interest
Health & Medical InfoSafe environment & health responseConsent / Vital Interest
Education & EmploymentCareer & development supportConsent / Legitimate Interest
Photos & VideosPromotion and reportsExplicit Consent
Volunteer Data & DBSSafe recruitment & managementLegal Obligation
Parent/Carer DetailsEmergency communicationSafeguarding

Data Protection Methods

Electronic Security

  • Secure, password-protected systems
  • Role-based access control
  • Regular system backups
  • Regular data reviews and deletions

Physical Security

  • Locked cabinets and drawers
  • Limited access to authorized staff
  • Secure shredding for disposal

Your Legal Rights

Access your personal data
Correct inaccurate data
Request data deletion
Object to data usage
Withdraw consent
Complain to the ICO

Subject Access Requests (SAR)

Request access to your data by emailing our DPO. We respond within one calendar month. Usually free of charge.

info@youthactivecic.org.uk

Questions or Concerns?

Contact our Data Protection Team for support.

+44 7757 100048
info@youthactivecic.org.uk