Who we are
We For You is responsible for deciding how personal information collected through this website and our services is used. In data protection law, this normally makes us the data controller. Questions about privacy can be sent to hello@weforyou.org.uk.
Information we may collect
- Identity and contact details, such as your name, email address and telephone number.
- Account, membership, household, organisation and role information.
- Bookings, applications, event registrations, course activity, orders, payments and communications.
- Content you choose to submit, including forms, community contributions, feedback and support requests.
- Private mood check-ins and wellbeing information when you are signed in and deliberately choose to save them.
- Professional qualifications, registrations, insurance and verification evidence where you apply to provide services.
- Technical and security information, including device, browser, sign-in and activity records needed to operate and protect the service.
Guest mood check-ins are processed in the open browser tab and are not saved to your account.
Why we use information
We use personal information only when there is a lawful reason to do so. Depending on the activity, this may be:
- to provide an account, booking, purchase, course, event or other service you requested;
- to take steps at your request before entering into an agreement;
- to meet legal, safeguarding, accounting, fraud-prevention or regulatory obligations;
- with your consent, for optional communications, embedded media or particular uses of sensitive information; or
- for our legitimate interests in operating, improving and securing We For You, provided those interests do not override your rights.
Health, wellbeing and other sensitive information
Information about physical or mental health, faith, ethnicity or similar matters can receive extra protection as special-category data. We use it only where a further legal condition applies, such as explicit consent, safeguarding vital interests, provision of appropriate health or social support, or another condition permitted by law. We limit access to people who need it for their work.
A low mood score does not by itself create a diagnosis or emergency response. If we reasonably believe someone faces an immediate and serious risk, we may use or share proportionate information to protect life or meet safeguarding and legal duties.
Children and young people
Some activities may involve children or families. We apply age-appropriate safeguards, minimise information, and seek parent or guardian involvement where required. Online services should not be used by a child independently where the relevant page or activity requires adult consent. Safeguarding concerns may need to be shared with appropriate services.
Who we share information with
We may share only what is necessary with:
- authorised staff, volunteers and verified professionals involved in the service you request;
- technology, hosting, email, payment and communications providers working under appropriate safeguards;
- delivery providers where you order a physical item;
- professional advisers, insurers, regulators, courts or law-enforcement bodies where legally necessary; and
- safeguarding or emergency services where necessary to protect someone from serious harm.
We do not sell personal information.
International transfers
Some service providers may process information outside the UK or European Economic Area. Where this happens, we use a lawful transfer mechanism and appropriate safeguards, such as an adequacy decision or approved contractual clauses, and assess the protection available where required.
Retention and security
We keep information only as long as needed for the purpose collected, legal or financial record-keeping, safeguarding, dispute resolution and security. The period varies by record type and any applicable legal requirement. We use access controls, audit records, encryption and other proportionate organisational and technical measures, but no online service can promise absolute security.
Your rights
Depending on the circumstances, UK and European data protection law may give you the right to:
- ask for a copy of your personal information;
- correct inaccurate or incomplete information;
- ask us to erase or restrict information;
- object to certain uses, including direct marketing;
- receive certain information in a portable format;
- withdraw consent at any time, without affecting earlier lawful use; and
- ask for human review where a legally significant decision is made solely by automated means.
To exercise a right, email hello@weforyou.org.uk. We may need to confirm your identity. You can also complain to the UK Information Commissioner’s Office at ico.org.uk. If European law applies to you, you may also contact your local supervisory authority.
Changes to this notice
We may update this notice when our services or legal duties change. The latest version and update date will remain on this page.