Privacy Policy

DobroDIY CIC


Who we are

DobroDIY CIC is a community organisation based in London, supporting migrants, displaced individuals, and local communities — particularly the Ukrainian community — through guidance, community programmes, and referral services.

We act as a community support hub, including providing legal information and referrals to appropriate professionals.

DobroDIY CIC is the data controller for the personal data we process.

📩 Contact: info@dobrodiy.uk


What information we collect

We may collect:

  • your name and contact details
  • information about your enquiry or situation
  • basic demographic information (e.g. nationality, language)
  • safeguarding-related information (where relevant)
  • communication records
  • photos or videos (only with consent)

Why we collect your information

We collect your data to:

  • respond to your enquiry
  • provide support and guidance
  • arrange sessions and referrals
  • support your wellbeing and access to services
  • ensure safety (safeguarding)
  • produce anonymised reports for funders and partners

We will never sell your data or use it for marketing without your consent.


Legal basis for processing

We process your data under:

  • consent
  • legitimate interest (community support services)
  • legal obligation
  • safeguarding responsibilities (vital interests)

How we store your data

Your data is stored securely:

  • in password-protected systems
  • with restricted access
  • using appropriate security measures

Only authorised staff or volunteers can access your data.


Sharing your information

We may share your data:

  • with your consent (for referrals)
  • with partner organisations (where necessary)
  • where required by law
  • where there is a safeguarding concern

We only share the minimum necessary information.


How long we keep your data

We retain data only as long as necessary:

  • service records: up to 3 years after last contact
  • safeguarding records: longer where required
  • financial records: up to 6 years (legal requirement)

After this, the data is securely deleted or anonymised.


Your rights

You have the right to:

  • access your data
  • correct inaccurate information
  • request deletion
  • restrict or object to processing
  • withdraw consent

You also have the right to complain to the Information Commissioner’s Office (ICO):
https://ico.org.uk/concerns/


Safeguarding

If we are concerned about your safety or the safety of others, we may need to share information with appropriate services, even without your consent.


International data transfers

Where data is stored or processed outside the UK, we ensure appropriate safeguards are in place in line with UK GDPR.


Changes to this notice

We may update this Privacy Notice from time to time.
The latest version will always be available on our website.