Privacy policy

Last updated: 1 September 2025

Taking Shape Association (“we”, “us”, “our”) is committed to protecting the privacy and personal information of everyone who interacts with us. This Privacy Policy explains what data we collect through our website, how we use it, and your rights under UK data protection law.

1. Who we are

Taking Shape Association is a UK-based community organisation supporting young people through creative, physical and personal development programmes. For data protection purposes, we are the "data controller" of the information you provide.

If you have any questions about this policy or your data, you can contact us at: kfk.stuart@gmail.com

2. What personal data we collect

We may collect and process the following personal information:

  • Contact details such as your name, email address or phone number (e.g. when you complete our contact form)

  • Donor information if you make a donation via a third-party provider like PayPal (we do not store your payment card details ourselves)

  • Newsletter opt-ins, if you choose to receive updates from us

  • Technical data such as IP address, browser type and device information, collected automatically via Squarespace analytics

3. How we use your information

We use your data to:

  • Respond to your messages and enquiries

  • Keep a record of consent where you’ve opted in to future contact

  • Process donations via a secure third-party provider (e.g. PayPal)

  • Understand how visitors use our site so we can improve its performance

We will never sell your personal information or share it with third parties for marketing purposes.

4. Our legal basis for processing data

Under UK GDPR, we process your data based on one or more of the following legal grounds:

  • Consent — where you’ve opted in (e.g. to receive updates)

  • Legitimate interest — to respond to enquiries and improve our services

  • Legal obligation — where required for record-keeping or compliance

You can withdraw your consent at any time by contacting us.

5. How we store and protect your data

Your data is stored securely through trusted services like Squarespace and PayPal. We take appropriate steps to protect your information from unauthorised access, loss or misuse. Access is limited to individuals who need it to perform their role.

We keep personal data only for as long as necessary to fulfil the purposes outlined above, or as required by law.

6. Cookies and website analytics

Our site uses basic cookies and analytics tools provided by Squarespace. These help us understand visitor behaviour and improve site performance. You can manage your cookie preferences through your browser settings.

We do not use any additional tracking or advertising cookies.

7. Your rights

Under UK data protection law, you have the right to:

  • Access the personal data we hold about you

  • Request correction of inaccurate information

  • Request deletion of your data (in certain circumstances)

  • Withdraw consent at any time (for example, if you no longer want to receive updates)

  • Complain to the Information Commissioner’s Office (ICO) if you have concerns about how we handle your data

To exercise any of these rights, please contact us at [insert contact email].

8. Third-party services

Where we use trusted third-party services (such as PayPal for donations), your data may be processed according to their privacy practices. We encourage you to review their privacy policies if you use these services via our site.

9. Changes to this policy

We may update this Privacy Policy from time to time. The latest version will always be posted on this page with the updated date.