Privacy Policy

Ambition Links — Privacy Policy

Effective date: 15 September 2025

Ambition Links respects your privacy and is committed to protecting your personal information. This Privacy Policy explains how we collect, use, store and protect your data when you use our website, attend our services, make a booking or donation, or otherwise interact with us.

By using our website or giving us your information, you agree to the practices described in this policy.

1. Who we are

Ambition Links is Registered Company providing adult day services, community activities and support programmes.
Registered name: Ambition Links.
Registered charity / company number: 10774008.
Registered address: Clive Vale Church, 7 Edwin Road, Hastings, East Sussex. TN35 5JT
Email: ambitionlinks2017@gmail.com.
Telephone: 07388 683683.

2. What information we collect

We may collect and process the following types of information:

Personal details: name, date of birth, address, phone number, email.
Health and support needs: where relevant to providing safe care and activities.
Emergency contact details: next of kin or carer information.
Booking and attendance details: sessions you book, attend or cancel.
Payment and donation information: payment card details (processed securely via third-party providers), donation history, Gift Aid declarations.
Website usage data: IP address, browser type, pages viewed, cookies (see section 9).
Communications: records of emails, phone calls, feedback or complaints.
Marketing preferences: whether you have opted in to receive updates from us.

3. How we use your information

We use personal data for:

Providing services — to deliver adult day services, activities, bookings and support.
Safety and wellbeing — to keep participants safe, manage health and support needs, and contact emergency contacts if needed.
Payments and donations — to process fees, bookings, donations, Gift Aid claims and refunds.
Communication — to respond to enquiries, provide updates about services, and send important notices (such as cancellations).
Marketing — where you have consented, to send newsletters, event details or fundraising information. You can unsubscribe at any time.
Legal obligations — to comply with safeguarding, health and safety, accounting and charity law requirements.
Improvement — to analyse service use, improve our website, and develop new services.

4. Lawful basis for processing

We rely on one or more of the following lawful bases under UK GDPR:

Consent — where you choose to receive marketing communications.
Contract — where processing is necessary to deliver services you have requested.
Legal obligation — where processing is required by law (e.g. tax, safeguarding, Gift Aid).
Vital interests — where it is necessary to protect someone’s life or wellbeing.
Legitimate interests — where it is in our interests to manage our services efficiently and does not override your rights.

5. Sharing your information

We will never sell your personal data. We may share it only with:

Trusted service providers (e.g. IT, payment processors, email platforms) who help us deliver our services.
Regulators and authorities (e.g. HMRC for Gift Aid, safeguarding agencies, local authority commissioners) where legally required.
Emergency services if there is a risk to health or life.
Professional advisers such as insurers or auditors, where necessary.

All third parties are required to respect your privacy and keep your information secure.

6. Data storage and security

Your information is stored securely in electronic systems and, where necessary, in locked paper files.
We use encryption, access controls and secure servers to protect data.
Only staff and volunteers who need the information have access.
Payments and donations are processed securely by third-party providers; we do not store your full card details.

7. How long we keep your data

We keep personal information only as long as necessary for the purpose it was collected. Typical retention periods include:

Service user records: up to 7 years after you stop using our services (or longer if required by safeguarding law).
Gift Aid declarations: 6 years after the last donation.
Financial records: 6 years for accounting purposes.
Marketing data: until you unsubscribe or withdraw consent.

When no longer needed, data is securely deleted or destroyed.

8. Your rights

You have rights under UK GDPR, including:

Right of access — request a copy of the data we hold about you.
Right to rectification — ask us to correct inaccurate or incomplete data.
Right to erasure — request deletion of your data (in some cases).
Right to restrict processing — ask us to limit how we use your data.
Right to data portability — request transfer of your data to another provider.
Right to object — object to processing for direct marketing or certain other purposes.
Right to withdraw consent — where we rely on consent (e.g. marketing).

To exercise your rights, contact us using the details below.

If you are unhappy with our response, you have the right to complain to the Information Commissioner’s Office (ICO): www.ico.org.uk.

9. Cookies and website use

Our website uses cookies (small text files) to:

Improve site performance and security.
Remember preferences.
Analyse how visitors use the site.

You can control cookies through your browser settings. For more information, see our [Cookie Policy].

10. Children’s data

Ambition Links does not knowingly collect personal data directly from children under 16. If you believe we have received such data without parental consent, please contact us.

11. Changes to this Privacy Policy

We may update this Privacy Policy from time to time. The latest version will always be available on our website and will include the “Effective date” at the top.

12. Contact us

If you have any questions about these Terms, please contact:

Email: ambitionlinks2017@gmail.com

Telephone: 07388 683683

Address: Clive Vale Church, 7 Edwin Road, Hastings, East Sussex. TN35 5JT

Experienced Staff

Helping Build Confidence

Small Valued, Supported Groups