Sensitive data

​

We do not ask you to disclose details of any trauma history through our website or forms. If you choose to share personal or sensitive information during our support services, this is treated with the highest level of confidentiality. We do not record, store, or share the content of support sessions unless required by law (see Safeguarding below).

3. How we use your data
 

We use your data only for the purpose it was provided:

• To respond to your enquiry

• To arrange and deliver training or webinars

• To deliver digital products you have purchased

• To arrange and provide support sessions

• To issue invoices and process payments

• To issue certificates of attendance
   

We do not use your data for marketing unless you have specifically asked us to keep you informed. We do not send unsolicited emails. We do not share your data with third parties for their marketing purposes.
 

4. Legal basis for processing
 

Under UK GDPR, we process your data on the following legal bases:
 

• Consent: when you submit a form or register your interest, you consent to us using your data for the stated purpose. You can withdraw consent at any time.

• Contract: when you book training or purchase a resource, we process your data to fulfil that agreement.

• Legitimate interest: we may follow up on a training enquiry or webinar registration to arrange the service you requested. You can opt out at any time.
   

5. Who we share your data with
 

We do not sell your data. We share it only with the following service providers, who process data on our behalf:
 

• Wix: our website is hosted on Wix. Form submissions are processed through Wix's servers. See Wix privacy policy.

• Microsoft 365: emails, calendar, and meeting invitations are managed through Microsoft 365. Training is delivered via Microsoft Teams. See Microsoft privacy statement.
  Zoom: online training sessions and webinars may be delivered via Zoom. When you join a Zoom session, your name, email address, and any data shared during the session (such as chat messages) are processed by Zoom. See Zoom privacy statement.

• Ticket Tailor: individual training bookings are processed through Ticket Tailor's event ticketing platform. When you book a place on one of our open enrolment training sessions, your name, email address, and payment information are collected and processed by Ticket Tailor on our behalf. We do not store your payment card details. See Ticket Tailor privacy policy.

• Payment processors: if you pay for training or resources online, your payment is processed by a third-party payment provider (including Stripe, used by Ticket Tailor). We do not store your payment card details.
   

We will not, without your express consent, provide your personal information to any third party for the purpose of direct marketing.
 

We may also share data if required by law, for example in response to a court order or to comply with safeguarding obligations.
 

6. Safeguarding
 

SAFER Birth Project follows standard safeguarding procedures. If during the course of our work a safeguarding concern arises involving risk to a child or a vulnerable adult, we may be required to share relevant information with the appropriate authorities. We will inform you if this happens, unless doing so would put someone at risk.

7. How long we keep your data

We keep your personal data only for as long as we need it for the purpose it was collected for, and then we delete it securely. How long that is depends on the type of information:
 

• Contact form enquiries. We keep enquiries while we deal with them and for up to 12 months afterwards, in case you get back in touch about the same matter. If your enquiry does not lead to an ongoing relationship, we delete it after that.

• Webinar registrations. We keep your registration details for up to 12 months after the webinar, so we can send you anything you signed up for and understand who attended. After that we delete them, unless you have asked to stay on our mailing list.

• Training bookings and certificates of attendance. We keep records of training bookings and certificates of attendance for up to six years. This lets us reissue a certificate or confirm attendance if you need proof for your own professional or CPD records.

• Invoice and payment data. We keep invoices and payment records for at least six full financial years, because we are required to do so under UK tax and accounting law.

• Support session information. We keep as little as possible. As set out above, we do not record or store details of your trauma history. Any limited administrative notes we do hold (for example, that a session took place, or practical arrangements) are kept only for as long as we are supporting you and for a short period afterwards, and are then securely deleted, unless a safeguarding concern or a legal obligation means we have to keep them longer.

• Mailing list. If you have joined our mailing list, we keep your details until you unsubscribe or ask us to remove you.

When any retention period ends, we securely delete or anonymise the information. If you would like us to delete your data sooner, you can ask us at any time (see your rights, above), and we will do so unless we are legally required to keep it.