Privacy Policy

Effective Date: 20th March 2025
Organisation: Goal 17 Ltd

1. Who We Are

Goal 17 Ltd (“we”, “us”, “our”) is a UK-registered limited company delivering high-impact training, volunteering, and mentoring programmes. We are committed to protecting the privacy of all individuals we engage with, including learners, volunteers, and service users.

This policy explains how we collect, use, and safeguard your personal data in line with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

Contact for Data Protection Queries:
📧 [email protected]
📞 07828 085778
📍 2 Lakeview Stables, Lower St. Clere, Kemsing, Sevenoaks, Kent TN15 6NL

2. What Personal Data We Collect

We collect different types of data depending on your relationship with us:

a. Volunteers

Name, contact details, date of birth
References, DBS checks, recruitment information
Emergency contact information
Volunteer training and participation records

b. Clients / Service Users

Name and contact details
Information relevant to your support needs
Progress notes, safeguarding information, referral details
Goals, feedback, and communications

c. Learners (Training Participants)

Name, email, organisation, job title
Progress tracking, quiz and assessment results
CPD certificates and university accreditation records
Feedback and course reviews

d. Website and Platform Users (The Goal17 Learning Platform & Scorecards)

IP address, browser/device data
Usage data including progress through modules and resource downloads
Cookies and analytics (see Section 10)

e. Communications & Storytelling

Survey responses, interviews, and feedback
Case studies, quotes, testimonials
Photo and video content — only with signed image release forms

3. How We Collect Data

We collect your data through:

Sign-up forms for training, volunteering, or client services
Our digital platforms, including The Goal17 Learning Platform and Scorecards
Surveys, feedback forms, and interviews
Referrals from trusted partners (e.g. local authorities)
Direct communication via phone, email, or WhatsApp

4. Why We Use Your Data

We process your data under the following legal bases:

Consent – e.g. for email marketing, media use, or evaluation participation
Contract – e.g. to deliver a training course or mentoring programme
Legal obligation – e.g. safeguarding responsibilities, reporting to authorities
Legitimate interests – e.g. improving our services, monitoring impact, or programme evaluation

Where we rely on legitimate interests, we conduct a Legitimate Interests Assessment (LIA) to ensure your rights are not overridden.

5. How We Use Your Data

We use your personal data to:

Deliver accredited training and issue certificates (e.g. via Oxford Brookes University and The CPD Certification Service)
Match and manage volunteers and clients
Provide access to The Goal17 Learning Platform and Scorecards
Invite eligible users to our secure communication platform, Wowment Ltd
Record and respond to safeguarding concerns
Analyse engagement and report impact (often in anonymised form)
Feature quotes, photos, or case studies (only with consent)
Improve the quality and accessibility of our services

6. Children and Young People

We do not knowingly collect data from individuals under the age of 16 without appropriate consent from a parent, guardian, or referring authority. If we discover we have done so without valid consent, we will delete that data immediately.

We encourage parents and carers to supervise young people’s use of our platforms and engage with our safeguarding policies.

7. Forums, Community Areas, and Messaging (If Applicable)

If you use any forums, group chats, or messaging features within our platform, please be mindful of what you share. Any personal data you voluntarily disclose may be visible to other users and could be collected or reused by others.

We recommend not sharing personal or sensitive information unless necessary and in accordance with your safeguarding training.

8. Sharing Your Data

We do not sell or rent your personal data. We only share it with trusted partners and platforms when required, including:

Our partner platform Wowment Ltd, to facilitate secure communication
The Goal17 Learning Platform and Scorecards (for learning delivery)
Accreditation bodies (e.g. Oxford Brookes University, The CPD Certification Service)
Local authorities or safeguarding services (where required by law)
Data processors (e.g. email platforms, survey tools) under data-sharing agreements
Funding partners (anonymised data or with consent)

9. International Transfers

Some of our platforms or service providers may process data outside the UK. Where this occurs, we ensure that data is protected by appropriate safeguards, such as UK International Data Transfer Agreements (IDTAs) or Standard Contractual Clauses (SCCs).

10. Cookies and Analytics

Our platforms use cookies and analytics tools to:

Improve user experience
Track progress and performance
Understand how users navigate our content

You can manage or disable cookies through your browser settings. Disabling cookies may affect platform functionality.

We do not use tracking cookies for advertising or third-party marketing purposes.

11. Retention of Data

We only keep your data for as long as necessary:

Volunteers: Up to 6 years after your last engagement
Clients: Up to 6 years from the last contact
Learners: 3 years after course completion
Media and stories: 3 years after signing a release form
Safeguarding records: In line with statutory requirements
Survey and feedback data: Anonymised and used for impact reporting

Data is securely deleted or anonymised when no longer required.

12. Marketing and Opt-Outs

We may send you occasional updates about opportunities, training, or news — but only if you have given permission.

You can opt out at any time by clicking “unsubscribe” in any email or contacting us at [email protected].

We may still send you essential service communications, such as information about your course or safeguarding concerns.

13. Your Rights

You have rights under UK GDPR, including to:

Access the data we hold about you
Request corrections to inaccurate or outdated data
Request deletion of your data (where possible)
Restrict or object to how we use your data
Withdraw consent at any time (for anything based on consent)
Request a copy of your data in a portable format
Lodge a complaint with the Information Commissioner’s Office (ICO)

To exercise these rights, contact us at [email protected]. We aim to respond within one month.

14. External Links

Our platform or website may include links to third-party websites. We are not responsible for the content or privacy practices of these sites. Please review their policies before providing any personal data.

15. How We Keep Your Data Safe

We follow strict data protection procedures to keep your information secure, including:

Encrypted cloud storage and access controls
Secure access to The Goal17 Learning Platform and Scorecards
Staff training in data protection and safeguarding
Password protection and multi-factor authentication
A robust Information Security Policy
Regular security audits and reviews

Despite our efforts, no system can guarantee 100% security online. By using our services, you accept this risk and agree to contact us immediately if you suspect misuse of your data.

16. Changes to This Policy

This policy is reviewed annually and updated as needed. The latest version is always available at [Insert web link].

17. Contact Us

For questions, concerns or to exercise your data rights:

Fran Boorman
📧 [email protected]
📞 07828 085778
📍 2 Lakeview Stables, Lower St. Clere, Kemsing, Sevenoaks, Kent TN15 6NL

To raise a complaint with the UK regulator:
Information Commissioner’s Office (ICO)
📍 Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF
🌐 https://ico.org.uk/make-a-complaint/