Origami Wings CIC respects your privacy and handles personal information in line with the UK GDPR and the Data Protection Act 2018.
Lawful basis
We only collect personal data we genuinely need — for example to provide therapy, arrange funded places, and meet our safeguarding and legal duties. Depending on the purpose, our lawful basis may be consent, the performance of a contract, our legitimate interests, a legal obligation, or the protection of someone's vital interests. Where we handle sensitive (special category) data, such as health information, we apply the additional protections the law requires.
Your rights
- To be informed about how your data is used.
- To access the personal data we hold about you.
- To have inaccurate data corrected.
- To request erasure, or to restrict or object to processing, where the law allows.
- To data portability, where applicable.
Retention and complaints
We keep personal data only for as long as necessary to fulfil the purpose it was collected for, or to meet legal and professional record-keeping requirements, after which it is securely deleted. If you are unhappy with how we handle your data, you can complain to the Information Commissioner's Office (ICO) at ico.org.uk.
For how records are stored and kept confidential, see our data protection page.
Next step: to request the full GDPR Policy, email hello@origamiwings.org.