Privacy Policy

This privacy notice for The 3H Foundation (we, us or our) describes how and why we might collect, store, use and/or share (process) your information when you use any of our services such as when you:

  • Visit our website at the3hfoundation.org.uk
  • Engage with us in other related ways, including registering or applying for services.

Our Contact Details

The 3H Foundation
Unit B2 Speldhurst Buinsess Park
Langton Road
Speldhurst
Tunbridge Wells
Kent
TN3 0AQ

01892 860207

info@the3hfoundation.org.uk

What information we collect

We collect personal information that you voluntarily provide to us when you register or apply for a service with us or when you contact us expressing an interest in obtaining information about our services.

The personal information we collect depends on the content of your interactions with us and the service you apply or register for.

The personal information we collect may include the following:

  • name
  • phone number
  • email address
  • mailing address
  • financial details
  • disability information
  • caring responsibilities

Privacy Notice – Children

Some of our programmes support children and young people. We explain our use of personal data in age‑appropriate language and limit tracking on pages likely to be accessed by under‑18s. We do not use children’s data for profiling or automated decisions that have legal or similarly significant effects.

Sensitive information

When necessary, with your consent or as otherwise permitted by application law, we process the following categories of sensitive information:

  • financial information
  • health information

How we process your information

We process your information for a variety of reasons depending on how you interact with our services including:

  • To deliver and facilitate delivery of our services – we may process your information to provide you with the requested services.
  • To respond to your enquiries/offer support – we may process your information to be able to respond to your enquiries and solve any potential issues you may have with your required services.
  • To send administrative information to you – we may process your information to send you details about our services, changes to our terms and policies or other similar information.

What legal basis do we comply with to process your information.

We only process your personal information when we believe it is necessary and we have a valid legal reason to do so under applicable laws.

The GDPR require us to explain the valid legal basis we rely on in order to process your personal information:

  • Consent We may process your information if you have given us permission (consent) to use it for a specified purpose. You can withdraw your consent at any time.
  • Performance of a contract We may process your personal information when we believe it is necessary to fulfil our contractual obligations to you, including providing you with services.
  • Legal Obligations We may process your information when we believe it is necessary to comply with our legal obligations, such as to cooperate with a law enforcement agency, exercise or defend our legal rights, or disclose your information in evidence in litigation in which we are involved.
  • Vital Interests We may process your information where we believe it is necessary to protect your vital interests or the vital interests of a third party such as situations involving potential threats to the safety of any person.

When and with whom do we share your personal information

We may share information in specific situations described below:

Vendors, Consultants, and other third-party service providers. We may share your data with third-party service providers who support our services and require access to such information to do that work. We have contracts in place with our third-party service providers which help safeguard your personal information.  This means that they cannot do anything with your personal information unless we have instructed them to do so. They will also not share your personal information with any organisation apart from us.

The third parties we may share personal information with are as follows:

  • Web and Mobile Analytics – Google Analytics
  • Website Hosting – GoDaddy
  • Holiday Companies – These may change but we will advise you which company we are using upon application.

Cookies and other tracking technologies

This site uses cookies, small text files that are placed on your machine to help the site provide a better user experience. In general, cookies are used to retain user preferences, store information for things like completed forms, and provide anonymised tracking data to third party applications like Google Analytics. As a rule, cookies will make your browsing experience better. However, you may prefer to disable cookies on this site. The most effective way to do this is to disable cookies in your browser or disable them as commanded when logging into the site.

How long do we keep your information and how is it stored.

We will only keep your personal information for as long as it is necessary for the purposes of the service requested unless a longer retention period is required or permitted by law.

Your information is stored securely either electronically or paper based. Although no electronic transmission over the internet can be 100% secure, we have implemented appropriate and reasonable technical and organisational security measures designed to protect the security of any personal information we process. You should only access the services within a secure environment.

Your Data and Privacy rights

Under data protection law you have rights including:

Your rights of access – you have the right to ask us for copies of your personal information.

Your right to rectification – you have the right to ask us to rectify personal information you think is inaccurate. You also have the right to ask us to complete information you think is incomplete.

Your right to erasure – you have the right to ask us to erase your personal information in certain circumstances.

Your right to restriction of processing – you have the right to ask us to restrict the processing of your personal information in certain circumstances.

Your right to data portability – you have the right to ask that we transfer the personal information that you gave us to another organisation, or to you, in certain circumstances.

You have the right to object to us processing your information for marketing purposes. You can unsubscribe from your marketing communications at any time by contact, by return email telephone or letter.

You are not required to pay any charge to exercise any of your rights.

  

How to raise a concern or make a Data Protection Complaint

We are committed to protecting your personal information and handling all data responsibly. If you have any concerns about how The 3H Foundation collects, uses, or stores your personal data, you have the right to raise a complaint.

1. Contact us first

The Data (Use and Access) Act 2025 (DUAA) places increased emphasis on organisations having a clear and accessible internal complaints process before issues are escalated externally. 

If you believe your data has not been handled correctly, or you would like to understand more about how we process your information, please contact us using:

Email: info@the3hfoundation.org.uk
Post: The 3H Foundation, B2, Speldhurst Business Park, Langton Road,
Speldhurst, Tunbridge Wells, Kent TN3 0AQ

When writing to us, please include:

  • Your name and preferred contact details
  • A brief description of your concern
  • Any relevant dates or supporting information

We will acknowledge your complaint and aim to respond within one calendar month, following the “reasonable and proportionate” approach to handling data protection requests established under DUAA updates. [gov.uk]

2. If you are not satisfied with our response

If you are unhappy with our reply or believe we have not resolved your concern appropriately, you have the right to raise the matter with the Information Commissioner’s Office (ICO).

The ICO oversees data protection regulation in the UK and can investigate concerns about how personal data is processed. Under DUAA‑related governance updates, the ICO continues to publish the regulatory guidance that organisations and individuals should follow.

ICO Contact Details:
Information Commissioner’s Office
Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF
Website: https://www.ico.org.uk
Phone: 0303 123 1113

3. Before contacting the ICO

The ICO encourages individuals to contact the organisation first to give them the opportunity to resolve the issue. This reflects DUAA changes, which strengthen the expectation that organisations have a transparent internal complaints process for data protection matters.

Raising your concern directly with us first allows us to investigate promptly and put things right where necessary.

4. Our commitment

We take all concerns seriously and will always aim to resolve matters fairly, transparently, and in accordance with UK data protection law, including the updates introduced under the Data (Use and Access) Act 2025 and associated ICO guidance.

 

 

Changes to our privacy policy

This privacy policy may change from time to time in line with legislation of industry developments. We will not explicitly inform our clients or website users of these changes, Instead, we recommend that you check this page occasionally for any policy changes.

Change log

09/05/2018 Version 1.00 privacy policy instigated.

02/10/2023 Version 2.00

10/03/2026 Version 3.00