Aupeer CIC Privacy Policy
Who we are
-
We are Aupeer CIC, a community interest company led by and for autistic people. We provide peer support groups and related activities.
You can contact us about data protection at:
📧 aupeercic@aupeer.org.uk
What data we collect
We may collect the following types of personal information:
- Contact details (name, email, phone).
- Information provided when joining a group or volunteering.
- Records of communication with us.
- Any information you choose to share with us when using our services.
- In the future, we may also hold contact details for partner organisations or sponsors who work with us.
We do not collect more data than we need.
How we use your data
We only use your data to:
- Provide peer support and activities.
- Communicate with you about events, groups or volunteering.
- Meet legal obligations (e.g. financial records).
- Keep everyone safe (e.g. in a safeguarding or medical emergency).
Lawful bases
We rely on:
- Consent (e.g. sending you updates if you opt in).
- Legitimate interests (e.g. managing groups and volunteer support).
- Legal obligations (e.g. keeping financial records).
- Vital interests (e.g. sharing information in an emergency).
How long we keep your data
We keep personal data only as long as necessary.
- Peer and volunteer records are normally deleted within 12 months of leaving.
- Mailing lists (where consent is given) are reviewed regularly, and you can unsubscribe at any time.
- Financial records are kept for 7 years.
Sharing your data
We will not sell or trade your data.
We only share data with trusted services we use to run our activities (such as online platforms).
Sometimes the law requires us to share information (e.g. safeguarding concerns).
Where and how we store your data
We store all personal data securely on a Google Shared Drive, which is only accessible to our directors. Their accounts are protected with strong passwords and two-factor authentication.
You have the right to:
Your rights
- Access the information we hold about you.
- Ask us to correct mistakes.
- Ask us to delete your data (unless we must keep it for legal reasons).
- Restrict or object to how we use your data.
- Withdraw consent at any time.
To use your rights, email us at aupeercic@aupeer.org.uk. We normally respond within one month.
Keeping your data safe
We use secure systems and limit access to personal data. While no system is completely secure, we work hard to protect your information.
Data breaches
If something goes wrong and your data is put at risk, we will let you know and, if necessary, report it to the Information Commissioner’s Office (ICO).
Changes to this policy
We may update this policy from time to time. The latest version will always be on our website.