1. Introduction
With Each Other CIC is a community interest company registered in England, company number 17493664. We are the controller of personal data collected through this website. We respect your privacy and handle personal data in accordance with the UK GDPR and the Data Protection Act 2018. This policy explains how we collect, use and protect your data.
2. What data we collect and why
When you send a project enquiry, we collect the information you provide: your full name, job title, organisation name and type, work email, optional phone number, project details, project stage and timeline. Please do not include sensitive personal information about yourself or community participants in your initial enquiry.
We use this information to respond to your enquiry, discuss your project and manage our relationship with you. Our lawful basis is our legitimate interest in responding to enquiries and running our organisation, or taking steps at your request before entering into a contract, where applicable.
If you separately subscribe to a newsletter, we use your name and email address with your consent. You can withdraw that consent at any time. Sending a project enquiry does not sign you up for marketing.
3. How we use your data
- To respond to your questions and project enquiries.
- To communicate about services you have requested and administer agreed work.
- To send marketing communications only where we have the appropriate consent or another permitted basis.
- To keep necessary business records and meet legal obligations.
4. Cookies and tracking
Website hosting and essential technical services may process information needed to deliver and secure the website. Any non-essential analytics or marketing cookies require your consent before they are used. You can also manage cookies through your browser settings; disabling essential cookies may affect website functions.
5. Who we share your data with
We do not sell your personal data. We use service providers to host the website and securely store project enquiries, including Lovable Cloud. Providers process information as needed to deliver their services. We may also disclose information where required by law.
If personal data is transferred outside the UK, we must ensure the appropriate legal safeguards apply, such as an adequacy decision or approved contractual safeguards. Details of relevant providers and safeguards can be requested through our contact form.
6. How long we keep your data
We retain enquiry and business records only for as long as needed for the purpose for which they were collected, including necessary legal, accounting and record-keeping obligations. Retention depends on whether an enquiry leads to ongoing work. You can contact us to ask about the retention of your information.
Where newsletter subscriptions are offered, we retain subscription information until you unsubscribe or it is no longer needed. We may keep a minimal suppression record to respect your request not to receive further marketing.
7. Your rights
Depending on the circumstances, you have the right to:
- Access your personal data.
- Correct inaccurate data.
- Request deletion of your data.
- Withdraw consent where processing relies on consent.
- Restrict processing in certain circumstances.
- Object to processing based on legitimate interests, and to direct marketing.
- Receive or transfer your data where the right to data portability applies.
To exercise these rights, contact With Each Other CIC, stating that your enquiry relates to data protection. We may need to verify your identity. We normally respond within one month; permitted extensions will be explained to you.
8. Complaints
If you have concerns about your data, contact With Each Other CIC. You also have the right to complain to the Information Commissioner's Office (ICO) at ico.org.uk.
Last updated: 16 October 2026.