Privacy Policy

privacy policy

Overview – Key Points

    • Data Controller: Adhoc Support CIC (CIC 16306685, Preston, UK); Technology support: WebshopCompany Ltd (UK)
    • All personal data is handled in accordance with UK/EU GDPR, DSA, and applicable data protection laws.
    • You can request access, correction, erasure, restriction, portability, or object at any time.
    • Questions or complaints: dataprotection@adhocsupport.org
    • See full details below for all legal and technical aspects.

1. Who Are We?

Adhoc Support CIC (CIC: 16306685, Unit A30, Red Scar Industrial Estate, Longridge Road, Preston, PR2 5NA, United Kingdom) operates the website adhocsupport.org with technology support from WebshopCompany Ltd (UK, 08595221, same address).

2. What Does This Policy Cover?

This policy explains how we collect, use, and store your personal data, how we use cookies, when and why we share data with third parties, how we protect your information, and your rights.

3. What Data Do We Process?

    • Technical use: IP address, device ID, browser type, cookie identifiers, logged actions
    • Via forms (registration, contact, joining): name, email, optional additional data
    • Data collected by cookies and tracking (statistics, security, user experience)
    • Any submitted data (comments, complaints, feedback, uploads, etc.)

Providing data is voluntary, but some features require data processing to function.

4. Why Do We Process Your Data?

    • To operate and secure the service
    • User identification, contact, and community features
    • Legal compliance (GDPR, DSA, digital services, consumer protection law)
    • Website optimisation, development, and statistical purposes
    • Community advocacy and processing valid complaints

5. Cookies and Your Choices

We use cookies and similar technologies for operation, analytics, and user experience. We request your consent for non-essential cookies on first use. You can change your cookie preferences at any time via the Cookie Policy and your browser settings. Disabling cookies may reduce website functionality.

6. How Long Do We Keep Your Data?

    • We retain personal data only as long as necessary or required by law.
    • Cookies: Depending on type, some last days, weeks, or months, or until deleted.
    • Community account: deleted immediately on closure, request, or withdrawal of consent.

7. Who Do We Share Your Data With?

    • WebshopCompany Ltd, as technology provider, with the same level of data protection.
    • Trusted service providers (hosting, firewall, analytics, operations) – only essential data, under contract and confidentiality.
    • Legal obligations, courts, authorities, legal protection purposes.
    • Data may be transferred outside the UK/EEA only with proper safeguards (e.g., UK/EU SCCs or adequacy decisions).
    • We never sell your data to third parties.

8. Data Transfers Outside the UK/EEA

If needed, we only transfer data outside the UK/EEA or Switzerland with EU/UK-approved contractual clauses (SCCs) or adequacy decisions. We always check and record these conditions.

9. How Do We Protect Your Data?

    • All data is protected by TLS (transit) and AES256 (storage) encryption.
    • High-level physical and IT security (datacentres, access controls, logging).
    • Annual independent penetration testing and continuous vulnerability assessments.
    • Access is limited strictly to those who need it for their work.
    • Staff and partners receive regular training and are bound by legal and contractual obligations.
    • For security incidents, contact: dataprotection@adhocsupport.org

10. What Are Your Rights?

    • Right of access – request information about your stored data
    • Right to rectification – correct inaccurate or incomplete data
    • Right to erasure (“right to be forgotten”)
    • Right to withdraw consent
    • Right to restrict processing
    • Right to object to certain processing
    • Right to data portability – receive your data in a structured, machine-readable format
    • Remedies: you may complain to the data protection authority (we encourage you to contact us first and we will help!)

11. How to Exercise Your Rights

    • You can exercise any right via dataprotection@adhocsupport.org, your account, or in writing.
    • We will respond within 1 month, or 2 months if necessary (with explanation).
    • Identification may be required – you can only access your own data.
    • Legal remedies: you may contact the Information Commissioner’s Office (ICO) in the UK, or your local authority.

12. Automated Decision-Making

    • We do not use solely automated decision-making with legal or significant effects on you. If this changes, we will inform you in advance.

13. External Links

    • This website may contain links to third-party sites, which have their own privacy policies. We are not responsible for these; always check their terms.

14. Complaints and Contact

15. Changes to This Policy

    • We reserve the right to amend this privacy policy at any time.
    • We will notify you of major changes by email or on the website.
    • The current version is always available here.
      Last updated: 2nd June 2025.