Seed.uk.net/Seedfamilies.co.uk Privacy Notice

 

This Privacy Notice applies to Project S.E.E.D. Limited (“Seed”), who we also refer to throughout as “we”, “us” or “our.”. Seed is a Data Controller for the purposes of all relevant Data Privacy and Data Protection legislation.

 

Our contact details for data protection and privacy purposes are as follows:

 

Telephone Number (+44) 020 8958 0820

Email address info@seed.uk.net

Address Mowbray House, 58-70 Edgware Way, Middlesex HA8 8DJ

 

Please contact us or our Data Protection Officer by post, email or telephone if you have any questions about this Privacy Notice or any information we hold about you.

 

We regularly review this Privacy Notice and will place any updates on our website. This Privacy Notice was last updated in October 2024 and will next be reviewed in September 2025.

 

Purpose of this Privacy Notice

 

This Privacy Notice outlines what to expect when Seed processes your personal information due to your visit to this website. It applies to the personal information about visitors to this website, as well as what to expect if you sign up for an event, or get in touch with us, for example if you make an enquiry about volunteering. It tells you the purposes for which we may process your personal information and the legal basis for these processing activities.

 

Why Do We Collect and Store Personal Information?

 

This website stores the basic information necessary to allow your chosen web browser to display and run the site as intended. This may include your IP address, device type, screen size, and other technical session information used to display the website on your device. We also collect information that you voluntarily submit to us, such as when you send an enquiry, book an event, make a donation or sign up to our mailing list.

 

All our website financial transactions are handled through our payment management platform, Stripe. You should only provide your personal information to Stripe after reviewing the Stripe privacy notice. We will share information with Stripe only to the extent necessary for the purposes of processing payments you make via our website.

 

Legal Basis for Processing

 

We rely on different legal bases for processing personal data, depending on the circumstances and purposes of processing. Please note that “Session data” (e.g., IP address) is retained to deliver the website and remember your preferences without needing explicit consent under UK law. Such data is not retained by us and you are also able to block any cookies via your browser’s privacy settings.

 

Consent: If you voluntarily submit personal data (e.g., email address) via our website, such as when you send us an enquiry about volunteering, subscribe to our mailing list or sign up to an event.

 

Children’s Data

 

Please note that as we organise events for families and young people, we are sometimes required to process children’s data. We take the responsibilities of doing this extremely seriously, and any such data is subject to extra controls around who can access it.

 

We are also required to state an additional legal basis for the processing of Children’s data as such information is categorised as Sensitive in UK data law. Seed uses the legal basis of the performance of a contract, i.e. the agreement made by the Child’s parent or legal guardian when signing up for one of Seed’s services.

 

Information We May Hold and How We Use It

 

Communication

We may hold your contact details to communicate with you about Seed services or to provide updates if you subscribe to our mailing lists. This category of Personal Data will include things like your name, telephone number, date of birth and email address.

 

Financial Records

We keep records of donations and transactions for statutory record-keeping purposes. This category of Personal Data will include things like your bank account details, Gift Aid forms, etc.

 

Statistical and Analytical

We also maintain and analyse information where it comes to reporting event attendances, marketing communications effectiveness and campaign attribution. This information will not be used to make decisions affecting you directly.

 

Medical

If you attend one of our events and disclose a medical condition or other health-related information to us, we will use this discreetly in order to protect you and, if relevant, other attendees of the event. An example would be disclosing a nut allergy so that we can ensure your safety, or a physical condition that would require us to make adequate preparations for your comfort and safety.

 

How We Manage Your Personal Information

 

We process your personal information in accordance with the principles of the UK Data Protection Act 2018. We ensure that information is:

 

  • Processed only for specific purposes;
  • Kept accurate, up-to-date, and relevant;
  • Not kept longer than necessary;
  • Secured appropriately with encryption, robust user identity authentication and appropriate access controls.

 

Access to personal information is restricted to authorised individuals on a need-to-know basis. You are encouraged to inform us of any required changes to ensure your data is kept accurate and up-to-date.

 

Periods For Which We Will Store Your Personal Information

 

We retain your data for the minimum statutory period necessary in accordance with data minimisation principles. Email and contact information you provide through this website will be retained for at least two years, or longer if you continue interacting with us unless you request its deletion via a Subject Access Request.

 

Sharing Your Personal Information

 

Normally, only Seed staff will access and process your personal information. However, we may share information with third parties under the following circumstances:

 

  • To comply with legal requirements (e.g., law enforcement or HM Revenue and Customs);
  • To address a clear health or safety risk to an individual or the public;
  • To provide necessary information to contractors or agents acting on our behalf.

 

When sharing personal information, we comply with all aspects of the Data Protection Act and other relevant legislation, such as the Privacy in Electronic Communications Regulation (PECR). We also ensure that in the event of any cross-border data transfers these are only carried out where data adequacy agreements exist (e.g. the EU) and appropriate transfer mechanisms such as the Standard Contractual Clauses (the USA) are in place.

 

In the course of providing our Services, we may also receive personal data and send personal data to relevant third parties. The sources we may also collect Personal Information from include:

 

  • Publicly accessible sources, e.g. Companies House, sanctions screening providers, etc.;
  • Direct from a third party, e.g. from a client or charity;
  • A third party with your consent, e.g. your solicitors, accountants, and other professionals we may engage with in provision of Our Services;
  • Our information technology systems, e.g., case management, document management or our Website’s back-end CRM;
  • Automated monitoring of our Website and other technical systems, such as our computer networks and connections, communications systems, email, voicemail and instant messaging systems.

 

What Cookies and Analytics Does This Website Use?

 

We use a number of “session” Cookies to enable our Website to run properly. We use WordPress as a platform to create and publish our website. WordPress cookies are present on the site to collect general information about visitors to our Website. This information includes pages visited and other data that is used to make sure the site runs as intended on your device and are usually only set in response to actions made by you which amount to a request for services, such as setting your privacy preferences, logging in, or filling in forms.

 

“Session” Cookies

 

CookieLawInfoConsent (Duration: 1 year)

Purpose: Stores the user’s cookie consent state for the current domain.

 

cookielawinfo-checkbox-necessary (Duration: 1 year)

Purpose: Determines whether the user has accepted the cookie consent box.

 

viewed_cookie_policy (Duration: 1 year)

Purpose: Stores whether or not the user has consented to the use of cookies.

 

Functional Cookies

These cookies enable the website to provide enhanced functionality and personalisation. They may be set by us or by third-party providers whose services we have added to our pages.

 

_wpfuuid

The _wpfuuid cookie is associated with WPForms, a popular form-building plugin for WordPress websites. This plugin allows site owners to create contact forms, surveys, and other interactive forms. _wpfuuid also has a lifespan of one year and assigns a random, anonymous unique identifier (UUID) to each site visitor. It helps keep track of form entries made by individual users, even if they are not logged in or authenticated on the site. All data created by this cookie is anonymised, meaning it cannot be used to identify visitors to this website.

 

cookielawinfo-checkbox-functional (Duration: 1 year)

Purpose: Remembers the user’s cookie preferences for the “Functional” category.

 

cookielawinfo-checkbox-others (Duration: 1 year)

Purpose: Stores the user’s cookie consent for the “Others” category.

 

Performance Cookies

These cookies allow us to count visits and traffic sources so we can measure and improve the performance of our site. They help us to know which pages are the most and least popular and see how visitors move around the site.

 

cookielawinfo-checkbox-performance (Duration: 1 year)

Purpose: Stores the user’s cookie consent for the performance cookies category.

 

Analytics Cookies

These cookies help us understand how visitors interact with our website by collecting and reporting information anonymously.

 

cookielawinfo-checkbox-analytics (Duration: 1 year)

Purpose: Remembers the user’s cookie consent for the “Analytics” category.

 

Advertising Cookies

These cookies may be set through our site by our advertising partners. They may be used by those companies to build a profile of your interests and show you relevant ads and content on other sites.

 

cookielawinfo-checkbox-advertisement (Duration: 1 year)

Purpose: Stores the user’s cookie consent for the “Advertisement” cookies category.

 

X-PP-ADS (Duration: 1 year)

Purpose: Used by PayPal for advertising purposes.

 

Third-Party Cookies

Our website includes functionality provided by third parties, particularly for payment processing. These third parties may set their own cookies for functionality, security, and analytics purposes.

 

PayPal Cookies

KHcl0EuY7AKSMgfvHl7J5E7hPtK (Duration: 13 months)

Purpose: Used by PayPal for fraud prevention and detection.

 

WELCOME_ASYNC (Duration: 13 months)

Purpose: This cookie is used by PayPal to track if a visitor has been welcomed asynchronously during their visit. It helps improve user experience during sign-in or other PayPal interactions.

 

TLTDID (Duration: 13 months)

Purpose: Used by PayPal for fraud prevention and detection.

 

d_id (Duration: 13 months)

Purpose: Used by PayPal for fraud prevention and detection.

 

ts, ts_c (Duration: 13 months)

Purpose: Used by PayPal for security and fraud prevention.

 

enforce_policy (Duration: 13 months)

Purpose: Enforces policies for PayPal’s user agreement.

 

login_email (Duration: 13 months)

Purpose: Remembers the user’s PayPal login email for convenience.

 

Stripe Cookies

__stripe_mid, __stripe_sid (Duration: 1 year and 30 minutes respectively)

Purpose: Used by Stripe for fraud prevention and detection.

 

cid (Duration: 3 months)

Purpose: Used by Stripe for identifying the session.

 

Cookie Duration

Most of our cookies are set to expire after 1 year, with some exceptions:

 

Session cookies (like __stripe_sid) expire when you close your browser.

Some third-party cookies (like those from PayPal) may last up to 13 months.

 

Managing Cookies

You can set your browser to refuse all or some browser cookies, or to alert you when websites set or access cookies. If you disable or refuse cookies, please note that some parts of this website may become inaccessible or not function properly.

 

Cookie Consent

When you first visit our website, we will ask for your consent to set cookies on your device. You can change your cookie preferences at any time by visiting our Cookie Settings page.

 

CookieLawInfoConsent

The CookieLawInfoConsent cookie is used to store user preferences regarding cookie consent on websites that implement the Cookie Law Info plugin or similar GDPR compliance tools.

 

The CookieLawInfoConsent cookie plays a vital role in ensuring that websites meet the legal requirements of the GDPR by allowing users to control their privacy settings and opt-in or opt-out of specific types of cookies. The set expiration for this cookie is a lifespan of about a year. This ensures that your preferences are stored for future visits.

 

 

Your Rights Under the Data Protection Act 2018 (DPA)

 

You have several rights under UK GDPR legislation as well as the data protection laws outside of the UK if you are not UK-based.

 

Access to personal information (Subject Access Request – SAR)

You have the right to ask us what personal information we hold about you. SARs must be made in writing (we have a subject access form for this purpose), and you must include proof of identity. We acknowledge SARs within 72 hours and provide requested information within 30 days.

 

Rectification

If there are inaccuracies in the personal data we hold about you, you have the right to request corrections.

 

Erasure

You have the right to request the deletion of your data under certain conditions, such as if the data is no longer necessary for the purpose it was collected, or if you withdraw consent.

 

Restriction of processing

You have the right to request that we stop processing your personal data in certain circumstances, such as if you contest the accuracy of the information.

 

Objection to processing

You may object to the processing of your data if you believe it is not in your legitimate interest. We must stop using your data unless we can demonstrate a legitimate basis to continue processing.

 

Withdrawal of consent

You can withdraw your consent for processing at any time. If consent is the legal basis for processing, we must stop using your data. We may continue processing if another legal basis applies.

 

Right to data portability

You can request to move, copy, or transfer your personal data to another IT system. This applies only to data you have provided, based on your consent or for contractual purposes, and when processing is automated.

 

Further Information

 

For more information on how to request your personal information or to understand how we process your data, please contact us via the contact details at the top of this Privacy Notice.

 

The Information Commissioner (ICO) is also a source of further information about your data protection rights. The ICO is an independent official body, and one of their primary functions is to administer the provisions of the GDPR.

 

You have the right to complain to the ICO if you think we have breached the GDPR or other relevant laws. You can contact the ICO via:

 

Information Commissioner’s Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF 0303 123 1113 |  http://www.ico.org.uk/