The Advocacy Project understands that privacy and the security of your personal information is extremely important and we are committed to protecting and respecting your privacy. We aim to be transparent about what we will do with your data and not do anything with it that you wouldn’t reasonably expect. We will only lawfully use the information that we collect about you.
This document tells you how we collect, use and store your personal information, as well as what we do to keep it secure. It also outlines your rights over any personal information we hold about you.
We collect personal data in order to be able to provide quality services to people. We also collect personal data so that we can share information about our work, our services and our events.
The General Data Protection Regulation (GDPR) provides the legal framework that defines how personal information can be used. The Advocacy Project is fully committed to complying with current data protection legislation and has a legal duty to protect any information we collect from you. The following principles apply whether we hold your information on paper or electronically:
- Your personal information is only used for the purpose for which we collect it
- Only information that we actually need is collected
- Your personal information is only seen by those who need it to do their jobs
- We will not pass your personal information on to any other organisation without your consent unless we are required to do so by law (see ’How do we use this Information?’)
- Personal information is retained only for as long as it is required for the purpose collected
- We will, where necessary, keep your information up to date
- Your information will be protected from unauthorised or accidental disclosure
- We will provide you with a copy of your personal information on request (see access rights and requests)
- Inaccurate or misleading data will be corrected as soon as possible
- How we collect information about you
- What information we collect
- How we use your information
- How we keep your information safe
- Access rights and requests
- Keeping your information up to date
- Your rights
- Changes to this policy
- Reporting a problem or complaint
How we collect information about you
We collect information in the following ways:
When you interact with us directly, you may give us your information when you:
- Use one of our services
- Sign up to receive information about our service or events
- Sign up for one of our events or training courses
- Make a donation
- Communicate with us generally
- Provide us with specific consent to contact you for given purposes.
When you interact with us indirectly, this is when your information is shared with us by a third party. For example, if someone refers you to one of our services.
Third party organisations: You may have provided permission for a company or other organisation to share your data with third parties, including other charities.
Social Media: Depending on your settings or the privacy policies for social media and messaging services like Facebook, WhatsApp, Twitter, Instagram, or LinkedIn, you might give us permission to access information from those accounts or services.
The information we get from other organisations may depend on your privacy settings or the responses you give, so you should regularly check them.
Information available publicly: This includes information found in places such as Companies House and information that has been published in articles/ newspapers.
When you visit our website – We gather general information which might include which pages you visit most often and which services, events or information is of most interest to you. We may also track which pages you visit when you click on links in emails from us. We also use “cookies” to help us make our site – and the way you use it – better. Cookies mean that a website will remember you. They are small text files that transfer to your computer (or phone or tablet). They make interacting with a website faster and easier – for example by automatically filling your name and address in text fields.
We use this information to personalise the way our website is presented when you visit to make improvements and to ensure we provide the best service and experience for you. Wherever possible we use anonymous information which does not identify individual visitors to our website.
What information we collect
Personal Information includes things like your name and contact details.
The type and quantity of information we collect and how we use it depends on why you are providing it.
Service users– a person who receives a service from The Advocacy Project
We collect information such as –
- Your name
- Your contact details
- Your date of birth
- Your Ethnicity
- Your Gender
- Your Disability
If we provide you with an advocacy service, we will collect information relevant to your case.
Where it is appropriate we may also ask for specific feedback, for example, how useful you found our services to be.
Referrers – people who have referred someone to one of our services
We collect information such as –
- Your name
- Your contact details
- Your job role
If you support us, for example, to make a donation, volunteer, support us through social media or have consented to receive information from The Advocacy Project, we will usually collect:
- Your name
- Your contact details
- Your date of birth
- Your ‘consent’ and permission details for other marketing activities such as events or courses.
How we use your information
Services – service users, referrers and people involved in an individual’s case
Only members of the appropriate team will collect, record and use your data
We will only use the information provided to:
- Facilitate our work with you
- Record information required by the organisation that funds us for the work such as a local authority.
- Monitor the quality of our service.
We may share your information with one our partner organisations if they are delivering the service that you need
We may contact you to ask for your assessment of how we helped you, your satisfaction with the service we provided, or other market research.
We will not:
- publish any information that could identify you personally without your consent.
- use your data for any purpose, other than in relation to your case, unless you give us your specific consent.
- share your data with third parties unless they are a partner organisation who is delivering a service for us
Children and young people advocacy
We collect data from and relating to children and young people under 16 who are receiving an advocacy service and we protect their privacy
Where appropriate, we will seek consent from a parent or guardian before collecting personal information about a child or young person. Where we are supporting a young person directly, any information will only be shared with their consent.
Supporters and donors
We use your data to:
- Provide you with the products or information you asked for
- Administer your donation or support your fundraising, including processing Gift Aid
- Keep a record of your relationship with us
- Ensure we know how you prefer to be contacted
- Understand how we can improve our services, products or information.
We may also use your personal information to detect and reduce fraud and credit risk.
Email newsletters and information updates
With your consent, we will contact you to let you know about our services, events and our organisation, or support for a campaign.
We will make it easy for you to tell us how you want us to communicate, in a way that suits you.
We respect that you may not want to hear from us, the updates we send you will always contain clear information on how to opt out from our mailings. If you’d prefer not to receive information you can let us know at
We do not sell or share personal details to third parties for the purpose of marketing. From time to time we may run an event in partnership with another named organisation and your details may need to be shared but we will be very clear what will happen to your data when you register for such events.
How we keep your information safe and who has access
Whatever your relationship with us we ensure that there are appropriate technical controls in place to protect your personal details. For example, our database is secure, protected and routinely monitored which we know is important in order to keep your data safe.
Some of our suppliers run their operations outside the European Economic Area (EEA). Although they may not be subject to same data protection laws as companies based in the UK, we will take steps to make sure they provide an adequate level of protection in accordance with UK data protection law. By submitting your personal information to us you agree to this transfer, storing or processing at a location outside the EEA.
Records relating to casework are kept securely and separately to all other data with limited access. Where records are paper-based they are kept in locked secure cabinets with very limited access.
Who has access to your information
We undertake regular reviews of who has access to information that we hold to ensure that your information is only accessible by appropriately trained staff, volunteers and contractors.
Where we use external companies to collect or process personal data on our behalf, we do comprehensive checks on these companies before we work with them to ensure they meet our expectations and requirements especially regarding how they manage the personal data they have collected or have access to. This may include a solicitor who we are working with on an advocacy case.
We may need to disclose your details to the police regulatory bodies or legal advisors if required. We will only ever share your data in other circumstances if we have your explicit and informed consent.
Keeping your data up to date
We make every effort to ensure that the data that we hold on you is accurate and up to date. From time to time this may require us to contact you in order to ensure that your situation, details and personal data preferences remain the same.
However, we really appreciate it if you let us know if your contact details change so that we may keep our records up to date. You can do this by contacting us at
You have various rights in respect of the personal information we hold about you – these are set out in more detail below. If you wish to exercise any of these rights or make a complaint, you can do so by contacting
Deputy CEO at The Advocacy Project 73 St Charles Square, London, W10 6xx by email via and by phone on 020 8969 3000.
You can also make a complaint to the data protection supervisory authority, the Information Commissioner’s Office, https://ico.org.uk/:
Access to your personal information: You have the right to request access to a copy of the personal information that we hold about you, along with information on what personal information we use, why we use it, who we share it with, how long we keep it for and whether it has been used for any automated decision making. You can make a request for access free of charge. To make a request you just need to contact The Advocacy Project or use the Subject Access Request Form which is at the end of this document. We might ask you for evidence of your identity.
Right to object: You can object to our processing of your personal information where we are relying on a legitimate interest (or those of a third party) and there is something about your particular situation which makes you want to object to processing on this ground. You also have the right to object where we are processing your personal information for direct marketing purposes. Please contact us, providing details of your objection via email at or by phone on 020 8969 3000..
Consent: If you have given us your consent to use personal information for example, for marketing, you can withdraw your consent at any time.
By providing us with your personal information, including sensitive information such as medical details, you consent to the collection and use of this information in accordance with the purposes described in this policy.
If you complete a referral form or contact us about a third party, we expect you to have the consent of the person concerned and, we will need their consent to proceed with any casework. If the person lacks capacity we will check that you have the right authority to act on the person’s behalf.
Rectification: You can ask us to change or complete any inaccurate or incomplete personal information we hold about you.
Erasure: You can ask us to delete your personal information where it is no longer necessary for us to use it, you have withdrawn consent, or where we have no lawful basis for keeping it.
Portability: You can ask us to provide you or a third party with some of the personal information that we hold about you in a structured, commonly used, electronic form, so it can be easily transferred
Restriction: You can ask us to restrict the personal information we use about you where you have asked for it to be erased or where you have objected to our use of it.
No automated-decision making: Automated decision-making takes place when an electronic system uses personal information to make a decision without human intervention. We do not currently carry out automated decision-making.
You have the right not to be subject to automated decisions that will create legal effects or have a similar significant impact on you, unless:
- you have given us your consent,
- it is necessary for a contract between you and us or
- it is otherwise permitted by law.
You also have certain the right to challenge decisions made about you.
Please note, some of these rights only apply in certain circumstances and we may not be able to fulfil every request.
For further information see the Information Commissioner’s guidance here (link is external).
Changes to this policy
- it is compliant with current law and
- clear and
If we make any significant changes in the way, we treat your personal information we will make this clear on our Website or we may contact you directly.
If you have any questions, comments or suggestions, please feel free to contact us at: or phone 020 8969 3000.
Reporting a problem or complaint
If you have a complaint regarding how we process your personal information, please contact the Deputy CEO at or phone 020 8969 3000 Alternatively, you can contact the Information Commissioner’s Office (ICO).