Privacy Policy

This Privacy Policy explains the policies of Flourish Project on the collection and use of information we collect when you access this website (the “Service”). This Privacy Policy describes your privacy rights and how you are protected under applicable data protection laws.

Introduction

Flourish Project (“we”, “us”, or “our”) respects the privacy of our users (“user” or “you”). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website https://www.flourishproject.net, including any other media form, media channel, mobile website, or mobile application related or connected thereto (collectively, the “Site”).

Please read this Privacy Policy carefully. If you do not agree with the terms of this Privacy Policy, please do not access the Site.

Changes to this Privacy Policy

We reserve the right to make changes to this Privacy Policy at any time and for any reason. We will alert you about any changes by updating the “Last updated” date of this Privacy Policy. Any changes or modifications will be effective immediately upon posting the updated Privacy Policy on the Site.

You are encouraged to periodically review this Privacy Policy to stay informed of updates. Your continued use of the Site after changes are posted constitutes acceptance of those changes.

Scope

Online Properties

This Privacy Policy applies only to Flourish Project’s website. If you click on a link to another website, this policy does not apply to information collected on that website.

Flourish Project has no control over third-party websites and is not responsible or liable for any loss or damage arising from their use or from information you provide to them.

Geographic Location

Flourish Project is based in the United Kingdom. Our digital platforms and service providers may be located in the United States or other jurisdictions.

Regardless of location, we follow the principles and requirements of UK GDPR and the Data Protection Act 2018, which represent some of the strongest data protection standards globally.

Collection of Your Information

We may collect information about you in a variety of ways, including:

Personal Data

Personally identifiable information such as your name, email address, telephone number, organisation, and other information you voluntarily provide when:

• completing forms
• subscribing to newsletters
• contacting us
• participating in surveys or events

You are under no obligation to provide personal information, but refusal may limit your ability to use certain features of the Site.

Derivative Data

Information automatically collected by our servers, including:

• IP address
• browser type
• operating system
• access times
• pages viewed before and after visiting the Site

Financial Data

We store minimal financial information, if any. Payments are processed through third-party providers (such as Stripe). We encourage you to review their privacy policies directly.

Data from Social Networks

If you choose to interact with Flourish Project via social platforms, we may receive limited profile information according to your privacy settings on those platforms.

Mobile Device Data

Device information such as device ID, model, manufacturer, and approximate location may be collected if you access the Site via mobile.

Third-Party Data

We may receive information from third parties if you grant permission through connected services.

By providing such information, you grant Flourish Project permission to use, store, and process it in accordance with this Privacy Policy.

Use of Your Information

We use collected information to:

• provide and operate the Site
• respond to enquiries
• deliver newsletters and communications
• improve user experience
• analyse usage trends
• prevent fraud and misuse
• process payments and refunds
• fulfil service requests
• maintain accurate records
• comply with legal obligations

We do not sell personal data.

Retention of Your Personal Data

We retain personal data only for as long as necessary for legitimate purposes.

Typical retention periods include:

• Supporter contact details: deleted 7 years after last engagement
• Unsuccessful applicants: deleted after 6 months
• Photographs and case studies: retained up to 7 years
• Newsletter subscribers: retained until unsubscribed

Some data may be retained longer where legally required or for research and archival purposes.

Individuals may request deletion of their data at any time, subject to legal obligations.

Disclosure of Your Information

By Law or to Protect Rights

Where required by law or to protect rights, safety, or property.

Third-Party Service Providers

We may share data with trusted providers for:

• website hosting
• email communications
• analytics
• payment processing
• customer support

These providers are contractually required to protect your data and may not use it for their own purposes.

Online Postings

Information shared publicly on the Site becomes public. Please avoid posting sensitive personal data.

Sale or Restructuring

If Flourish Project reorganises or merges, your information may transfer to a successor entity.

With Explicit Consent

We may share data with collaborators or partners only with your clear consent.

Tracking Technologies

Cookies

Cookies help operate the Site and improve experience. Essential cookies are always enabled. Optional cookies require consent.

You can manage cookies through browser settings or the Site’s consent tools.

Website Analytics

We may use analytics tools (such as Google Analytics) to understand usage patterns. These tools do not receive directly identifiable personal data from us.

You may opt out via browser tools or third-party opt-out mechanisms.

Third-Party Websites

We are not responsible for third-party sites linked from our Site. Please review their privacy policies separately.

Security of Your Information

We use administrative, technical, and organisational safeguards to protect your data. However, no system is fully secure, and online transmission carries inherent risk.

Technical Measures

• cookie consent tools
• encrypted connections
• secure hosting
• unsubscribe options
• periodic data deletion
• restricted access controls

Organisational Measures

• GDPR training for staff
• internal data protection policies
• designated data responsibility roles
• secure internal systems

Policy for Children

We do not knowingly collect data from children under 13. If such data is discovered, it will be deleted promptly. Parents are encouraged to supervise children’s online activity.

Do-Not-Track Features

If your browser sends Do-Not-Track signals, we respect those preferences where technically feasible.

Options Regarding Your Information

You may opt out of communications by:

• using unsubscribe links
• contacting us directly

You also have rights to access, correct, delete, restrict, or port your data, and to withdraw consent.

Contact Us

For privacy-related enquiries or to exercise your rights:

Email: contact@flourishproject.net
Website: https://www.flourishproject.net

Data Protection Authority

You have the right to complain to your local data protection authority.
For UK users, this is the Information Commissioner’s Office.