Privacy Policy
1. Offploy and your personal data
We are Offploy CIC (“Offploy”), a social enterprise registered at 10-12 East Parade, Leeds, England, LS1 2BH (company number 10204780).
As part of running Offploy, we use information that relates to people, called “personal data”. We decide how and why to do this, so we are the “controller” of the personal data. This Privacy Policy explains how we use personal data so that you know what to expect.
If you have any questions about this Privacy Policy, please contact us at support@disclosuretoolkit.org.
This Privacy Policy may be updated over time. It was last updated on [06/06/2025].
2. How we collect personal data
We collect and use personal data to run and improve Offploy and our offerings.
We collect personal data directly from you when you:
-
subscribe to receive updates or download resources, including our guides and Conviction Checklist;
-
submit information to us, such as through our Disclosure Calculator, Referral Forms, social media interaction, and the contact form on our website;
-
sign up to our virtual events, workshops and webinars;
-
take part in a call with us or interact with us by email or social media; or
-
engage in any other direct contact with us.
We also collect personal data automatically from our website using technology such as cookies. This tells us about how people use our website.
3. How we use personal data and why
The table below sets out how we use personal data in more detail. We may also use personal data where required by law or in order to protect ourselves and others.
Personal Data | Reason | Basis |
---|---|---|
Name, contact details (including address, telephone number and email address) of the referrer and CV of and referrer | To operate our Referral Programme | • Consent of the referrer
• Consent of the person with the conviction
• Contractual Necessity
|
Name, email address and organisation | • To deliver support, provide advice, guidance and information, and run calls and consultations with you
• To administer our virtual and in-person events
• To provide resources, such as our guides and checklists
| Legitimate Interest |
Date of birth and criminal conviction data | To operate our Disclosure Calculator | Consent of the person with the conviction |
Name, contact details, financial information, education information, mental and physical health information, criminal offence data, ethnicity, employment history, support requirements | To provide our services for socially excluded people, including mentoring and training | Your consent |
Website usage data (e.g. IP address, visit duration, browser type) | To operate, improve and secure our website | • Our legitimate interest in operating, improving and securing our website
• Your consent (where personal data is collected by non-essential cookies) as per our Cookie Policy which can be found on our website |
4. Who we share personal data with
We share certain personal data:
-
where we have permission to do so;
-
with our service providers, such as EventBrite, so that we can run Offploy and our offerings properly. These service providers are contractually required to keep personal data secure and only use it as we tell them to;
-
with our commissioners to help provide our services, such as the Department for Work and Pensions;
-
where we are required to do so by law or other regulatory, accounting or reporting rules which we must follow;
-
to protect our rights, interests and safety and those of others; and
-
if we become part of another organisation and the personal data is shared as part of that change.
5. How we keep personal data
We only keep personal data for as long as we need it, or longer if we have permission or are required to do so by law or other reporting, accounting or regulatory requirements which we must follow.
Some of our service providers run their operations outside of the UK, including in countries with different data protection laws to the UK. If personal data is sent or accessed outside the UK, we put in place safeguards to ensure it is adequately protected in line with UK data protection law.
6. Rights and complaints
You have rights over your personal data, which means you can ask us:
-
for a copy of the personal data we hold about you;
-
to correct any inaccurate or incomplete personal data we hold about you; and
-
in certain circumstances to stop using or remove the personal data we hold about you.
In addition, if we use your personal data based on your permission, you have the right to withdraw this permission at any time.
To do any of the above, please contact us at support@disclosuretoolkit.org.
If you are unhappy with the way we use personal data, please let us know at support@disclosuretoolkit.org. You can also tell the UK data protection regulator, the Information Commissioner’s Office, at https://ico.org.uk/makeacomplaint.