Privacy Policy

Who we are

Beyond Today Collective CIC is the controller responsible for your personal data.

Registered office: Marsh House Community Centre, Bramingham Lane, Luton, Bedfordshire, United Kingdom, LU3 3SR

Company number: 17467108

Contact us

If you have any questions about this policy, or want to exercise any of your rights, email hello@beyondtoday.org.uk.

You also have the right to complain at any time to the Information Commissioner's Office (ICO), the UK regulator for data protection (www.ico.org.uk). We'd appreciate the chance to sort out any concerns directly first, so please contact us before you go to the ICO.

Changes to this policy

We review this policy from time to time and may update it. Please check back occasionally to see the current version. Significant changes will be reflected in the "last updated" date at the bottom of this page.

Information we collect

Depending on how you interact with us, we may collect:

• Identity data — your name.
• Contact data — your email address, and phone number if you choose to give it.
• Enquiry and story information — anything you write to us through our contact form or by email, including if you choose to share your story with Beyond Today Voices. This may include personal information about your circumstances, background or experiences.
• Technical data — your IP address, browser type, device information and general location, collected automatically when you visit the Website.
• Usage data — information about how you use the Website, such as which pages you visit.
• Marketing preferences — whether you've signed up to our mailing list, and your choice to unsubscribe at any time.

We do not ask you to create an account, and we do not store payment card details.

Sensitive information you choose to share

Beyond Today Voices exists so people can share lived experience, and our contact form is deliberately open — people write to us about circumstances that can include health, wellbeing, relationships, housing, or past involvement with the criminal justice system.

We treat this as sensitive personal information. We only hold it because you have chosen to share it with us, and your act of sharing it is the legal basis (your explicit consent) on which we handle it. We do not ask for more detail than you volunteer, and we handle it with the same care set out in our Safeguarding policy — including the limited circumstances in which we may need to act on or share something you've told us even without your consent, such as where someone may be at serious risk of harm. Those circumstances are explained in that policy.

How we collect your information

We collect personal data when you:

• fill in our contact form — whether you're getting in touch with a general question, asking about joining an activity, volunteering, booking Beyond Today Voices, or sharing your story;
• sign up to our mailing list;
• email us directly; or
• browse the Website, through cookies and similar technology (see Cookies Policy).

How and why we use your information

Marketing communications

We'll only send you marketing emails, such as our newsletter, if you've asked to receive them by signing up. You can unsubscribe at any time using the link in any email we send, or by contacting us. If you unsubscribe, we may still need to contact you about anything ongoing, such as an activity you've already arranged to take part in.

We do not sell or share your personal data with other organisations for their own marketing purposes.

Keeping your information secure

We have appropriate security measures in place to prevent your personal data from being accidentally lost, used, accessed, altered or disclosed without authorisation. Access is limited to people — including directors, staff, contractors and volunteers — who genuinely need it, and anyone processing data on our behalf is subject to a duty of confidentiality.

Who we share your information with

We may share your information with:

• service providers who help us run the Website and our mailing list, such as our hosting provider and email newsletter platform;
• HMRC, our accountant, our insurers, or other professional advisers, where necessary;
• the police, adult safeguarding services, or another appropriate authority, where a safeguarding concern requires it, in line with our Safeguarding policy; and
• a regulator or other authority where we're legally required to.

We require anyone we share personal data with to keep it secure and only use it for the purpose we've shared it for. In the unlikely event that Beyond Today's structure changes significantly (for example, if we merged with or transferred activities to another organisation), your information would be handled in line with this policy or a successor policy you'd be told about.

International transfers

Some of the organisations that help us run the Website and mailing list — for example, hosting, email or analytics providers — may store or process data outside the UK. Where this happens, we make sure appropriate legal safeguards are in place, such as the UK's International Data Transfer Agreement or a UK adequacy decision.

How long we keep your information

We keep your information for as long as it's needed for the purpose it was collected, then delete or anonymise it. As a general guide:

• an enquiry or message is normally kept for as long as needed to respond and provide any follow-up, then deleted;
• if you take part in an activity, volunteer, or engage with Beyond Today Voices, we may keep basic contact information for longer where needed for safeguarding, legal or accounting reasons;
• information forming part of a safeguarding record is retained in line with our Safeguarding policy, which sets its own documented retention approach rather than keeping records indefinitely; and
• where we're required to keep basic financial records — for example, if you make a donation — these are retained for the period required by law, in line with our Financial Controls Policy.

Your rights

Under data protection law, you have the right to:

• ask for a copy of the personal data we hold about you;
• ask us to correct inaccurate or incomplete data;
• ask us to delete your data, in certain circumstances;
• object to us using your data where we're relying on legitimate interests;
• ask us to restrict how we use your data, in certain circumstances;
• ask for your data to be transferred to you or another organisation, in certain circumstances; and
• withdraw consent at any time, where we're relying on consent — for example, you can unsubscribe from our newsletter whenever you like.

To exercise any of these rights, email hello@beyondtoday.org.uk. We may need to ask you for information to confirm your identity before we act on a request, and we aim to respond within one month.

Date last updated: 24 September 2026