Last updated: September 2026

Who we are

Young Futures Norwich CIC is the data controller for the information you give us. We are a community interest company registered in England and Wales (company number 16754761). Our registered office is 1 Lanes Yard, King Street, Norwich NR1 1PH. We are registered with the Information Commissioner’s Office (ICO), registration number ZC176862.

If you have any questions about your information, email info@youngfuturesnorwich.org or call 07969 365609.

What information we collect

When you book a session or register a young person: the young person’s first name and age; your name, phone number and email; your relationship to the young person; any allergies or dietary needs; anything you tell us that helps us support them; and whether you agree to photos.

When you apply to volunteer: your name, email, phone number, whether you are 18 or over, when you are free and what you’d like to help with. If you go on to volunteer with young people, we will also carry out a DBS check.

When you contact us or enquire about a partnership: your name, email, organisation (if any) and your message.

When you donate or buy from our shop: payments are handled securely by Stripe. We receive your name, email, delivery address and what you bought or gave. We never see or store your card details.

Why we use it and our legal basis

• To run sessions and keep young people safe, including contacting you about bookings and planning menus around allergies. Our legal basis is our legitimate interests in running our activities. Allergy and health information is special category data, and we use it with your explicit consent, which you give when you book or register.
• To take and use photos of young people on our website and social media, only with your consent. You can withdraw consent at any time.
• To recruit and manage volunteers, including safer recruitment checks. Our legal bases are our legitimate interests and, for DBS checks, our legal and safeguarding obligations.
• To process donations and orders and deliver what you bought. Our legal basis is to fulfil our agreement with you, and our legal obligation to keep financial records.
• To reply to your messages and enquiries. Our legal basis is our legitimate interests.
• To protect a young person at risk. If we believe a child or young person is at risk of harm, we may share information with the appropriate authorities, as our safeguarding duties require.

We only send you news or updates if you ask us to. We never sell your information.

Who we share it with

• Stripe, which processes our online payments.
• Hostinger, which hosts our website and email.
• Google, for website analytics, only if you accept analytics cookies.
• The Disclosure and Barring Service, for volunteer DBS checks.
• Our funders, but only anonymous numbers (for example, how many young people attended). We never share names with funders without your permission.
• Children’s services or the police, only if we have a safeguarding concern or the law requires it.

How long we keep it

• Booking and registration details: for 12 months after a young person last attends, then deleted.
• Volunteer records: for as long as you volunteer with us, and for up to 12 months afterwards. We keep a record that a DBS check was done, but not a copy of the certificate.
• Messages and enquiries: for up to 12 months.
• Donation and order records: for 6 years, as the law requires for financial records.
• Photos: until you ask us to remove them.

If there has been a safeguarding concern, we may need to keep related records for longer, in line with safeguarding guidance.

Your rights

You have the right to ask for a copy of the information we hold about you, and to ask us to correct it, delete it, or stop using it. You can withdraw your consent, for example to photos, at any time. Young people can also make these requests themselves. To do any of this, email info@youngfuturesnorwich.org. We will reply within one month.

How we keep it safe

Only our directors, and the volunteers who need it to run sessions, can see your information. We take care to keep it secure and never leave it where others can access it.

This website

With your permission, we use Google Analytics to understand how people find and use our website, for example which pages are visited most. Google Analytics sets cookies and collects information such as the pages you view, roughly where you are (city level) and the type of device you use. It does not tell us who you are. We only turn it on if you click “Accept” on the cookie message, and you can change your choice at any time using “Cookie settings” at the bottom of every page. Our legal basis is your consent. Google processes this data for us; see Google’s privacy policy.

We do not use advertising cookies. The website also remembers your cookie choice and whether you chose light or dark mode; these stay on your own device. Our fonts load from Google Fonts, which means Google can see your device’s internet address when you visit.

Complaints

If you are unhappy with how we have used your information, please tell us first so we can put it right. You can also complain to the Information Commissioner’s Office at ico.org.uk/make-a-complaint or on 0303 123 1113.