Information We Collect

Information You Provide

When you contact us, complete a form, register for an event or use a service linked through our website, we may collect:

• Name
• Email address
• Telephone number
• Postal address
• Organisation details
• Information contained within your enquiry
• Booking and registration information
• Marketing preferences

---

Information Collected Automatically

When you visit our website, certain technical information may be collected automatically, including:

• IP address
• Browser type and version
• Device information
• Operating system
• Pages viewed
• Date and time of visit
• Referral source
• Website usage statistics

This information helps us understand how our website is used and maintain security.

---

How We Use Information

We may use personal information collected through our website to:

• Respond to enquiries
• Provide information about our services
• Process registrations and bookings
• Administer member or user accounts
• Improve website performance and accessibility
• Monitor website security
• Comply with legal obligations
• Prevent fraud and misuse
• Communicate updates where you have chosen to receive them

We only use personal information where there is a lawful basis to do so.

---

Our Lawful Bases

Under UK GDPR, MASKK may rely on one or more of the following lawful bases:

Consent

Where you have actively agreed to receive information, updates or marketing communications.

Contract

Where processing is necessary to provide a service you have requested.

Legal Obligation

Where we are required to process information to comply with legal requirements.

Legitimate Interests

Where processing is necessary to operate, improve and protect our website and charity activities, provided those interests do not override your rights and freedoms.

---

Cookies and Similar Technologies

Our website uses cookies and similar technologies to:

• Ensure the website functions correctly
• Improve user experience
• Remember user preferences
• Monitor website performance
• Maintain website security

Further information is available in our separate Cookie Policy.

---

Website Forms and Communications

If you submit information through our website:

• We will only collect information relevant to your request.
• Information will only be accessed by authorised individuals.
• We will not sell your information.
• We will not use your information for unrelated purposes without a lawful basis.

Where a form relates to childcare, volunteering, employment or service registration, additional privacy information may also apply.

---

Online Booking, Payment and Third-Party Providers

Our website may include links to or integrations with third-party systems and services, including:

• Booking systems
• Payment processors
• Membership services
• Survey tools
• Social media platforms
• Video hosting services

These providers may collect information directly from you under their own privacy policies.

We encourage users to review the privacy information provided by any third-party service they use.

---

Information Sharing

MASKK does not sell personal information.

We may share information where necessary and lawful with:

• Website hosting and IT providers
• Booking and payment providers
• Professional advisers
• Regulatory authorities
• Law enforcement agencies where required
• Safeguarding agencies where necessary to protect children or vulnerable individuals

Any sharing of information will be limited to what is necessary for the relevant purpose. The organisation’s wider GDPR framework emphasises that information should only be shared where lawful, necessary and proportionate, with safeguarding remaining a key consideration.

---

Children’s Privacy

Many visitors to our website are parents, carers or individuals seeking information about services for children and young people.

Where personal information relates to a child:

• We aim to collect only information that is necessary.
• We seek information from a parent or carer where appropriate.
• We consider the best interests of children when managing information.
• Information is handled in line with safeguarding and data protection requirements.

---

Keeping Information Secure

MASKK takes appropriate technical and organisational measures to protect information from:

• Unauthorised access
• Loss
• Misuse
• Alteration
• Accidental disclosure

Security measures may include:

• Secure hosting
• Password-protected systems
• Restricted user access
• Software updates
• Security monitoring
• Staff training and procedures

The wider MASKK data protection arrangements require information to be stored securely and accessed only by those who need it for their role.

---

How Long We Keep Information

We only keep information for as long as necessary.

Retention periods depend on:

• The reason information was collected
• Legal requirements
• Regulatory requirements
• Safeguarding obligations
• Security and audit needs

When information is no longer required, it will be securely deleted, anonymised or disposed of in accordance with MASKK’s Data Retention Policy.

---

 

External Websites

Our website may contain links to external websites.

MASKK is not responsible for the content, security or privacy practices of external websites and encourages users to review their privacy policies before sharing personal information.