This page sets out what data we collect, how we use and store it, and what your rights are.

OutoftheBox Training & Consultancy considers the privacy and confidentiality of data as a matter of the utmost importance. We are registered with the Information Commissioner’s Office and all our policies are written taking account of the UK General Data Protection Regulation (GDPR). 

What data do we collect?

We (OutoftheBox Training & Consultancy) will collect personal data, including names, addresses, email addresses, phone numbers and (for those under the age of 18) dates of birth, from four groups of people:

• OutoftheBox members
• People attending OutoftheBox events
• Other supporters who join our newsletter mailing list
• Other donors.

How do we use your data?

We collect your data for the following reasons:

• OutoftheBox members: to communicate with people about OutoftheBox operations, to have emergency contact and medical details where necessary, and to inform decisions about the running of the organisation
• People attending OutoftheBox events and other individuals relevant to the running of the organisation: to enable communication about OutoftheBox activities such as taster session, retreats, team days, training courses, story development meetings and other events.
• Mailing list: to provide occasional newsletters and other communications (via email) about OutoftheBox.
• Other donors: to record the details of donations made (including details needed for claiming Gift Aid).

How do we store your data?

We store your data securely on a password-protected cloud-based drive. Only the directors of OutoftheBox have access to this. Contact details for particular groups will be made available to other members of the organisation on a necessity basis only. No contact details will be shared with anyone outside the organisation, or will be shared with other members for any purposes other than those described above.

We will keep your data for as long as you belong to one of the groups above. We will delete personal information from our database no more than six months after you cease to belong to any of these categories. You have the right to request we delete some or all of your data at any point, which we will then do as soon as is reasonably possible.

Your Data Protection Rights

We would like to make sure you are fully aware of all of your data protection rights. Every user is entitled to the following:

• The right to access – You have the right to request OOTB for copies of your personal data. We may charge you a small fee for this service.
• The right to rectification – You have the right to request that OOTB correct any information you believe is inaccurate. You also have the right to request OOTB to complete the information you believe is incomplete.
• The right to erasure – You have the right to request that OOTB erase your personal data, as described above.
• The right to restrict processing – You have the right to request that OOTB restrict the use of your personal data.

If you make a request, we have one month to respond to you. If you would like to exercise any of these rights, please contact us at [email protected] 

How to contact us

If you have any questions about OutoftheBox’s privacy policy, the data we hold about you, or if you would like to exercise one of your data protection rights, please do not hesitate to contact us at [email protected] 

How to contact the appropriate authority

Should you wish to report a complaint or if you feel that OutoftheBox has not addressed your concern in a satisfactory manner, you may contact the Information Commissioner’s Office.